{"report_id":"f9c66e18-6a75-461b-9de9-79bb9556849b","version":0,"status":"done","tags":[],"date":"2026-09-14T19:09:22Z","url":{"schema":"http","addr":"kafibu.com/","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":0,"asn":14061,"as":"DigitalOcean, LLC","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"http","addr":"kafibu.com/","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"title":"Wirtz Group Personnel","dom":{"size":49164,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4224)","md5":"596dae0c800d011966d9a7379d001533","sha1":"9b9909ccbb4e498ec3e2cee5f01716c9a979e62c","sha256":"b4e2c8138859366d2170e3e25a03f665b4b4261071286e37aaa8b3bd32c7f443","sha512":"888ba0470441eafd6ac903fb7779cedc9528a7020d8eb35f6f01794e6bf4e0a6afa68b05746af0fbe6df66acec005ff4035c239f9a441e5c22c1385d52e58b6f","ssdeep":"768:hjrIIsnUKLgDPwjRUUx9EUn6wi36z74dunrgMui4BaR:5IIsU0gjqEUwOEO4BK","tlshash":"1f232b65d1f076bf118703e7bfa066953f94c11bfa050440b67c8ba86ff2c89ca27669","dom_hash":"domhashb0f1c55b67040bb9ec62c393b75eaed8","first_seen":"2026-09-14T19:09:30.247148Z","last_seen":"2026-09-14T19:09:30.247148Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kafibu.com/","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":0,"asn":14061,"as":"DigitalOcean, LLC","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-19T19:09:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"kafibu.com","ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"domain_registered":"2024-09-18","domain_rank":0,"first_seen":"2026-06-07T22:32:13.476189Z","last_seen":"2026-06-07T22:32:13.476189Z","alert_count":144,"request_count":36,"received_data":19516777,"sent_data":15554,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"kafibu.com/assets/script.js","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"7660a3bb82950966c0a9bb5b7ab37047","sha1":"8189c6136bb27f4b21d86168da998fd8f21966b0","sha256":"c49f3aaad5a8c522e44d58ef19a57a954959e876bd16162f21226b764d888314","sha512":"ffb0d1f93269af864a5fd0edfa72a15c7f63b301fd92ceda3fde86e0939478d2fde9e213878a31a309c374c47c7ecd77f972952a4020d1b76defa555d7f27d45","ssdeep":"96:D5gs3SN+h4VVGlJ3ihzJ6DwpgL21SeECrjyJ4IrdOk4lSzd4LgRRLX1gahIfoOlR:Fgs3SAlJ3gJ6UpgS1SNmjSbY+RphsR","tlshash":"e5c1867a617e34b5017715bb53cb92da7e6220477006a9113baccd482fd4ce1f9f26e2","size":6079,"data":"","first_seen":"2026-09-14T19:09:30.278992Z","last_seen":"2026-09-14T19:09:30.278992Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"kafibu.com/assets/accent-tool.jpg","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.782Z","timestamp":1789412926782,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/accent-tool.jpg HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 225590\r\nLast-Modified: Mon, 14 Sep 2026 08:54:25 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b641-37136\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":225590,"size_decoded":225843,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1366x768, components 3","md5":"a44027a8bc40e6d2978a3a19208edd21","sha1":"cace9b5cce270c45f34bdb3cad3281821814d24f","sha256":"7c68809fd621f5e7837148241e6f78f6986ba7595226f59b4b34ab4c8c8ee8ae","sha512":"c8fe3199d099235f8760be8fed5778cb42e0bc173c777d49af1537dc8bf82637ed4f16db235360ccc6f284a3601035ad0f705f08e71eb3bac27258a5203dde80","ssdeep":"6144:4w8J7uSjB6NgJYTBFgy8d1kAAGL38B0Z1k86DUJPBa:4B5uSd6ayKPjkAAGrJk86D4P4","tlshash":"6524227059971da252c42a31004faac6caba3f6b95d025d0f1afb1974f3eca0b9d7247","first_seen":"2026-09-14T19:09:30.25222Z","last_seen":"2026-09-14T19:09:30.25222Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":162,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/2026/img/icon-fast-matching-white.png","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.793Z","timestamp":1789412926793,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/2026/img/icon-fast-matching-white.png HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 9786\r\nLast-Modified: Mon, 14 Sep 2026 08:54:31 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b647-263a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9786,"size_decoded":10035,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"a10fbe08e7235f8b318eb1eccead6756","sha1":"ead9c749f3a8862b67d72b796f5bb233b8e6ebc9","sha256":"d9e8eba4b44be9c9934c99808708d0a239292d1e462c03cec56dc3faf17d41f3","sha512":"b7ef92327fdb4b80104fb13d0bdaaa728acb20029713eb94f2b59539cff6c75ae96e6a5f0b8dbab18f4de0784198f66a04e7d9fc8c9587e84348d5c2e80bd335","ssdeep":"192:dEjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjl4QUJh8Y:dEjjjjjjjjjjjjjjjjjjjjjjjjjjjjjg","tlshash":"7d1239bbaaa2dcb1a179cdd920f954f6ba4e13043112d5e55d0e7535cc915bf22f3103","first_seen":"2026-09-14T19:09:30.257026Z","last_seen":"2026-09-14T19:09:30.257026Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/2026/img/icon-communication-white.png","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.794Z","timestamp":1789412926794,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/2026/img/icon-communication-white.png HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 9042\r\nLast-Modified: Mon, 14 Sep 2026 08:54:31 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b647-2352\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":9042,"size_decoded":9291,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"81c0bb8c87b9258cb4b35027d5ed1efb","sha1":"6d27f5e7ca5880e597f9da5d35668a5f7bb78050","sha256":"3dd754893218f7d76ce11adb68d9650ed046e78d129e7b978b1683e2c086e039","sha512":"a167c6b386a5b84f435a3428f14e5a8796cf79e3af9b2038de938f4071fd185f12f1e81e6e2648b5b22dfe730c85b78e8a1ae815c799da16e4c91b9b5af6eaec","ssdeep":"192:iCOEgDxhcmDgKXXG6rwz/2lGXpuSy4AIX0YqYA7:iFDxnD5pw6lkpuDQ0Z7","tlshash":"c81208c353809ae2722e47d35b1e4210c887b398ef6f5b251647d99d2cad6834d03f9b","first_seen":"2026-09-14T19:09:30.260922Z","last_seen":"2026-09-14T19:09:30.260922Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/2026/icons/icon-customer-support.png","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.802Z","timestamp":1789412926802,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/2026/icons/icon-customer-support.png HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 17510\r\nLast-Modified: Mon, 14 Sep 2026 08:54:30 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b646-4466\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":17510,"size_decoded":17760,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"58604eb535cdbbe81b8087be510c7d9b","sha1":"6ac62bf77a9328c28d9f342776e55f251be54d4d","sha256":"fdbc00b2d8b1c35b935fafdaa06aa9db1e4a1f6bbf0aeef365d70fc147d37952","sha512":"87e4bb70b8d89093b075c600e7a5ccf719396ca567f7d0755b0edbb38e64f3155af301eade62ae0e0bd93fc6479a7c141e8bf4b5348f45057637e5844acd4271","ssdeep":"384:QVBvK1pZxZBLs5wCT82MdyrfDUj4jid/0SMahAt2E0pXHKJpw:WsZRUCEz4j4hzf0pz","tlshash":"de729ec2f0897ac190612895e32f78c4fdb8a58ff6195f1d2f99893b5543376f630819","first_seen":"2026-09-14T19:09:30.264886Z","last_seen":"2026-09-14T19:09:30.264886Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":19,"send":0,"wait":19,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/2026/icons/icon-admin-assistant.png","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.803Z","timestamp":1789412926803,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/2026/icons/icon-admin-assistant.png HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 10939\r\nLast-Modified: Mon, 14 Sep 2026 08:54:30 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b646-2abb\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10939,"size_decoded":11189,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"2f475b19094b5a426d8e40a27944a9e4","sha1":"e0b3b5da27668e12b6b8de5e0b9f06401b02dfa0","sha256":"6f28f9005d9980fe5478ca9dc30f149dd2082aba4476c0f5278fefb262b2ba72","sha512":"07a9f27799bac6adfb8a3ab3b8e8abbb5faae9968dd60411a541f99d8f5ec18dc8a8c15c9ee26cb445649ff9e333a2adfc1090b0e1c23495d846e51964a6033b","ssdeep":"192:TGSOZuG60ApwSuNPlyULSkb/EhYj2EcsCH9lN4NFALRRCRRIB:yruR0Ia9okbEejML/N4Nmug","tlshash":"21326c58d0312037be22a62dfd7248225417fc605521dd45228bb11ebae3fb87dbdee1","first_seen":"2026-09-14T19:09:30.268439Z","last_seen":"2026-09-14T19:09:30.268439Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":108,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/software%20dev.avif","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.792Z","timestamp":1789412926792,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/software%20dev.avif HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:47 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 3779\r\nLast-Modified: Mon, 14 Sep 2026 08:54:28 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b644-ec3\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3779,"size_decoded":4042,"mime_type":"application/octet-stream","magic":"ISO Media, AVIF Image","md5":"f4b8e531f8f22bbf8e6a6cd7c996a004","sha1":"5b7ae06f3054cd4d10dc4374976822bde6db6980","sha256":"f05c7e771144e5b647867deae94f6308f5574f1a90af27f2084547688da9625e","sha512":"f6b564efd6c921973068ac9facdfd67e911fa530d64ee32f3de960dac3b358365e57d2dcab83637e37c59290f82218a433becd5d56b3baf9558fc284648a13d2","ssdeep":"","tlshash":"f5715b2603845953d079073c8e6d5b06e508f16972c7eebbb4907621cb24bbe6621faa","first_seen":"2026-09-14T19:09:30.271675Z","last_seen":"2026-09-14T19:09:30.271675Z","times_seen":1,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":190,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/2026/%D1%84%D0%BE%D1%82%D0%BE-1.jpg","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.792Z","timestamp":1789412926792,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/2026/%D1%84%D0%BE%D1%82%D0%BE-1.jpg HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 567031\r\nLast-Modified: Mon, 14 Sep 2026 08:54:29 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b645-8a6f7\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":567031,"size_decoded":567284,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 3840x2160, components 3","md5":"fcd7a01ce2043dfcb2ebc76e3c593d41","sha1":"7c4bbc17b69b2590d343ce5541a2ab1ed4274613","sha256":"c21d3900811e9e0f5dd444a09b4574733c0af0693ac1011cdf10e24c74c92221","sha512":"289fd33da38f1957b7709bf4576985c0750f0c7824d81d42273d41d4c47996b334c17624e341caf57baf7db477ac57e44411b0b35ce84fc69b0bba35382758ce","ssdeep":"12288:Q6PWPscM7RMw3bHnCMMAVzqRJ4KpcreLnOzUyf/UmPhjgpQ:RPhP7CsnCqVzkJ4ILfoUgr","tlshash":"c3c423f0a38295b371266ab5ac114c22cf2c821bfdfbbdd1719ef59c0665b0dbb50681","first_seen":"2026-09-14T19:09:30.274421Z","last_seen":"2026-09-14T19:09:30.274421Z","times_seen":1,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":132,"dns":0,"connect":0,"send":0,"wait":27,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/tag-bundler/api/v1/fonts-cache/googlefont/woff2/s/leaguespartan/v11/kJEqBuEW6A0lliaV_m88ja5TwvZwLZmXD4Zh.woff2","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.880Z","timestamp":1789412926880,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /tag-bundler/api/v1/fonts-cache/googlefont/woff2/s/leaguespartan/v11/kJEqBuEW6A0lliaV_m88ja5TwvZwLZmXD4Zh.woff2 HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/assets/styles.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 23952\r\nLast-Modified: Mon, 14 Sep 2026 08:52:06 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b5b6-5d90\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23952,"size_decoded":24217,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 23952, version 1.0","md5":"66c76811dd475e57db94a59c74fba88d","sha1":"db095b387df45249511d0c142e901c4a81491436","sha256":"ad9bef9954ba20ebd9e44089ea4fe1750ae5895e5b31004fff911eb5d503cb7d","sha512":"758e54fe7283807cab42731fecd22420d4bb6bb516a6fd766ea524f8239ef1c81862fb19970c4de8459f6cd92a64d8cc9244fa3b806f82b8fe98b0374353ccc2","ssdeep":"384:S+slTcgTOiTWogjUOP07O5bB/zi8WkxJGlJuBZw/Ft12T3jIf03bfHOwUZYGHLSg:S1H6oWpFIQQHmZQ2T3jIf03MZYALJ","tlshash":"efb2f13194d607354627e0bc8b6e81e3cfe8997448236f52c591236c179896f3ed7b61","first_seen":"2023-05-19T00:32:37Z","last_seen":"2026-09-16T14:57:39.106756Z","times_seen":504,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/script.js","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.771Z","timestamp":1789412926771,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/script.js HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 6079\r\nLast-Modified: Mon, 14 Sep 2026 09:01:14 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b7da-17bf\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":6079,"size_decoded":6341,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"7660a3bb82950966c0a9bb5b7ab37047","sha1":"8189c6136bb27f4b21d86168da998fd8f21966b0","sha256":"c49f3aaad5a8c522e44d58ef19a57a954959e876bd16162f21226b764d888314","sha512":"ffb0d1f93269af864a5fd0edfa72a15c7f63b301fd92ceda3fde86e0939478d2fde9e213878a31a309c374c47c7ecd77f972952a4020d1b76defa555d7f27d45","ssdeep":"96:D5gs3SN+h4VVGlJ3ihzJ6DwpgL21SeECrjyJ4IrdOk4lSzd4LgRRLX1gahIfoOlR:Fgs3SAlJ3gJ6UpgS1SNmjSbY+RphsR","tlshash":"e5c1867a617e34b5017715bb53cb92da7e6220477006a9113baccd482fd4ce1f9f26e2","first_seen":"2026-09-14T19:09:30.278992Z","last_seen":"2026-09-14T19:09:30.278992Z","times_seen":1,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":19,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/2026/img/icon-data-security-white.png","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.795Z","timestamp":1789412926795,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/2026/img/icon-data-security-white.png HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 8888\r\nLast-Modified: Mon, 14 Sep 2026 08:54:31 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b647-22b8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8888,"size_decoded":9137,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"f489b888c92c32796bc3e3fde5df6c7e","sha1":"120f2334b7df2d129433078b4b7ef1230efa7aaf","sha256":"0c5ed818c3dfeea9e102174e1c05b5fe2158d8c6825daaad459466cef4306b41","sha512":"b3df3ef5eb6cdb8e00e5dbd2ca0e6167bceea25a6e62d0e5e4cb779947c7845a2081fb11c6a41793ad7c74531fa3aabc12d888a9a8d8fce72f3bf38dc289007a","ssdeep":"96:7MWCmeCMMUuQLRovIYBwlorV0LgqSzslfrbo2PaB2yAumRjiPnea29yVczkGZO:KMJIAgznhzbULQjiPhkkyO","tlshash":"fd02f9ea0e284c64b43fe0774803f671a43287d0de5f8f1e162de79a22cb361c959b44","first_seen":"2026-09-14T19:09:30.281831Z","last_seen":"2026-09-14T19:09:30.281831Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/2026/img/icon-orientation-white.png","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.796Z","timestamp":1789412926796,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/2026/img/icon-orientation-white.png HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 13312\r\nLast-Modified: Mon, 14 Sep 2026 08:54:32 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b648-3400\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":13312,"size_decoded":13562,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"12ba3526aea774c10d5071cb965eef33","sha1":"805af4055b7d1266831d36318c1c6434dfff4cc1","sha256":"b485f8b6bb51712d5c62c073bc1b043bf736c0c8da1f10d9aeb024d04dd34188","sha512":"ed8395ea5ddefb94c751f5f6cb1ee74a8952b273be0540e5b08c26e81a9d2e3f756ce14f25dac65d1049ba1b7223bff6b4ed937c8546a607fee07a96f28fb128","ssdeep":"192:6Bwzi+TdqzZ8AdDuRHQWE1VuwurgGTo+WeeiZOnJkzueUPdPA6df:6Ozi+shdDQHQjW8M7e2IJkz1WBf","tlshash":"84527d2d5278c192b0f92320a6ef46f823ec55db5bf1501a63418f5ed00afd81eece56","first_seen":"2026-09-14T19:09:30.284695Z","last_seen":"2026-09-14T19:09:30.284695Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/2026/icons/icon-sales-growth.png","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.804Z","timestamp":1789412926804,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/2026/icons/icon-sales-growth.png HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 15034\r\nLast-Modified: Mon, 14 Sep 2026 08:54:30 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b646-3aba\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15034,"size_decoded":15284,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"3aecfbb5e072d9c9285c8426549bfc9f","sha1":"ffffc2dfa94d0c67e94fcebdf69eb108059c8c64","sha256":"461596a436d6cc9552a304405b2c5e791f58a41ac37a37fd63b3e611da8a0e0e","sha512":"80ccebaf8ab42a06e949c628309efe29f722cd13e93d81f125eb35fdd019102be28c437467957af3949584bb7bff06d884bfed12138c0c73701adac337a04d55","ssdeep":"384:dj8gp99CWhHZuSrB6RqKQr2PGDAHJrMhCBweYnpZEJ:mgT9R/5rB6Rq4GDAHG8BJYnpuJ","tlshash":"1e625c26dae5724b950700808757b6c7abfb0c9b72644e8f2bb94c7798430d2fe74d26","first_seen":"2026-09-14T19:09:30.287288Z","last_seen":"2026-09-14T19:09:30.287288Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":108,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/digital%20marketing.avif","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.789Z","timestamp":1789412926789,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/digital%20marketing.avif HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 2821\r\nLast-Modified: Mon, 14 Sep 2026 08:54:26 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b642-b05\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2821,"size_decoded":3084,"mime_type":"application/octet-stream","magic":"ISO Media, AVIF Image","md5":"23a5b346afa93144a4059381aef99179","sha1":"2b12e76b3fc5b89f054160f52871c391528e14a1","sha256":"5bb2afdf7c55ac94fd34a419b99dbae747b54e9f90aeb8a230f004d7e3704cb6","sha512":"78a9e7c4b6694c0d82af2422b60543add40ab2d6ed3784d963dbf9cae0f497010fce65b0c205390dd870a343ed5a2b3b96436add83e29717073aaaf020a71a14","ssdeep":"","tlshash":"07513a54012cd943e2b8cfb80c78c70bc1e2722179be7ce7c80a356fe432160c285e4a","first_seen":"2026-09-14T19:09:30.289937Z","last_seen":"2026-09-14T19:09:30.289937Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/2026/icons/icon-turnaround.png","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.800Z","timestamp":1789412926800,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/2026/icons/icon-turnaround.png HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 19268\r\nLast-Modified: Mon, 14 Sep 2026 08:54:30 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b646-4b44\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19268,"size_decoded":19518,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"e7eabe79a42ba62047500c08a191b9c3","sha1":"e1cc2d2b871264215fe23af22bcfa8545bb28194","sha256":"a37b4e2e2233cb8120ff95e5d1b928ebfce953a9c7667c8fa99d41ebb7ed62c7","sha512":"a10eb4c13fed4d3d2223323807d66d6a908375a7df3761df4d24874be040cec0246abb87bfb26c9177155c8f4058deba02097503b3eae42c2a99968864e9256a","ssdeep":"384:TFB80OXNsfVMbhEQk4ZMa/L3vSlkGA2dPXG9+VMfOQQWz:TFIsitEQb/jYRXHIDz","tlshash":"1a82bf46d1e1b1459ea20294029a5c8cfef9ed67805b4f2a9f34ce3b9512770f5f0e2a","first_seen":"2026-09-14T19:09:30.292621Z","last_seen":"2026-09-14T19:09:30.292621Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":89,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/2026/icons/icon-bookkeeping.png","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.804Z","timestamp":1789412926804,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/2026/icons/icon-bookkeeping.png HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 10921\r\nLast-Modified: Mon, 14 Sep 2026 08:54:30 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b646-2aa9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10921,"size_decoded":11171,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"91d32df607f51c7c102830dcabe5705a","sha1":"5674f6282eec11a3838a86494f3f02f35f6a68d9","sha256":"07928cf8c5ee58c1b1349a21c2aa104584443bff5c0bb3d38d3e2f220e571099","sha512":"c9de58f612dca84973abd797623a1bdcf9611c44dc80b53b482d37ed94e18c513e8b383ff66ca303753cbfb30f214cf2e21295198134bad80d15a2c5c16299cd","ssdeep":"192:5AKbf/I5gvcROP0EMCX4Yqxj/LaLSxCxY2EuqppUAYVYUa9Wr62C:5AuI0t0nCFm/++gY2MAtmUa9WG","tlshash":"9c325bcdc73141b3fd8aa916c8689fa504626eac1321e5141a4bf44efb45f706eb4fa2","first_seen":"2026-09-14T19:09:30.295321Z","last_seen":"2026-09-14T19:09:30.295321Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":108,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kafibu.com/","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-14T19:08:46.418Z","timestamp":1789412926418,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-19T14:41:49.965913Z","times_seen":18550255,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/styles.css","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.763Z","timestamp":1789412926763,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/styles.css HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: text/css\r\nContent-Length: 51753\r\nLast-Modified: Mon, 14 Sep 2026 08:54:28 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b644-ca29\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":51753,"size_decoded":52002,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (845), with CRLF, LF line terminators","md5":"103c613943b73b979507a4a1c01d352e","sha1":"7502d4e5733a186e4dfb1ec16c971640b3ffbfcf","sha256":"0ca473cf6dc1bda3ddddf3735ac4e796ba654ef840ec581303eb4b576c82b775","sha512":"be8442a5263b902f98e7ad8adf7c78786f07e6a2fdb8e8c37cf0d8603c921b7e7c29273d199ef8b5f2045d995eb9a6ad099fce24e5824510296a3539174022c6","ssdeep":"768:aScr9c5CmzhS3+Dxn5jUJlIEdmIOKVxEHrbkUpvRDIYL:fcr9cXzhSgp4mIvxEHU8f","tlshash":"b733a666a5542220b176eba9fbc2778af218a013e74712f67ee05044c3cd4fe1675ece","first_seen":"2026-09-14T19:09:30.299345Z","last_seen":"2026-09-14T19:09:30.299345Z","times_seen":1,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/virtual%20assistant.avif","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.788Z","timestamp":1789412926788,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/virtual%20assistant.avif HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 3264\r\nLast-Modified: Mon, 14 Sep 2026 08:54:28 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b644-cc0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3264,"size_decoded":3527,"mime_type":"application/octet-stream","magic":"ISO Media, AVIF Image","md5":"c4734e7ae4225b7840c02aa9765e7ad4","sha1":"0732f79233acf22cc06dc0d8c2063857d3c31307","sha256":"31fd34101409f1d212d4b87a0a9180527f7ea167b2f17ba4e695b417b333d274","sha512":"7a05719ecb3e7849c2ae65ff6efb1fe0e4c1d878e403f33bdbdee7be01ef0fafc6a26ff041a37b3548fb69b85b1a14cb8fc56605da34c45b5c7abccf25e4b962","ssdeep":"","tlshash":"18613c1066716641c93e4ab48f3e7b687261d7a8533f22e065f931724873b914c5bf90","first_seen":"2026-09-14T19:09:30.302127Z","last_seen":"2026-09-14T19:09:30.302127Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":19,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/project%20manager.avif","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.790Z","timestamp":1789412926790,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/project%20manager.avif HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 3832\r\nLast-Modified: Mon, 14 Sep 2026 08:54:27 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b643-ef8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3832,"size_decoded":4095,"mime_type":"application/octet-stream","magic":"ISO Media, AVIF Image","md5":"f79f32e094a784c612cfd5870c61d573","sha1":"f094e1f98bd5f8e8cc716b01d04fd93437af1501","sha256":"584fe6ab8ef9aa18f73c8f60add28bbcde37e2918254f2d108719ce1f6c88ea8","sha512":"f8b421f943a309ebe1cc4d1eb124d99591d61945668460cc4f5cf94e8de3aaf3b9e8a1890cce791593b37516e16001af2b953ac52d8fde5a0753e0575476e863","ssdeep":"","tlshash":"92814b1c3371bc46cc8507b5034b82c4e61050963bb960aaa8c273772279ff748afd8a","first_seen":"2026-09-14T19:09:30.304303Z","last_seen":"2026-09-14T19:09:30.304303Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/2026/img/icon-checkmark-white.png","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.797Z","timestamp":1789412926797,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/2026/img/icon-checkmark-white.png HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 5598\r\nLast-Modified: Mon, 14 Sep 2026 08:54:31 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b647-15de\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5598,"size_decoded":5847,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"77270a9a203c1c839165637a505538cc","sha1":"dd41f08b0ae502cd207fc1c13ca6372d381df170","sha256":"acd3fe45a00b96e8ba2b72df9393e9fd75d18da0da95ee126cc5569d7b193906","sha512":"49f39705af8d10829a6c3e9907dbe610666d267cb51e8a2ef7605ef6e5da85067c4a5dff12622012d5cc50998860ff2b393b0e338aabb26d0013c59840ba8eab","ssdeep":"96:VZ4NPejO5pxo+FXas1ndB7ewo/EqDx2Jnck9pFp+l9fffffffffffffffffffff/:VymjE3q87G2J99pj+lF","tlshash":"c6c149c5654100f924f4efa3ae2092b2d67998b9ccf262f4073d539d026868ecf5bf55","first_seen":"2026-09-14T19:09:30.306772Z","last_seen":"2026-09-14T19:09:30.306772Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/2026/icons/icon-flexible.png","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.800Z","timestamp":1789412926800,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/2026/icons/icon-flexible.png HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 13819\r\nLast-Modified: Mon, 14 Sep 2026 08:54:30 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b646-35fb\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13819,"size_decoded":14069,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"20b956c087e2774817c67e414c3163ae","sha1":"41ff699d74e08c3b069aca39d585e666c65ba2e2","sha256":"caae6b7ce0a60b1fd39bfa2b1f6b7625faf39992689721c260433c1ae6a57b40","sha512":"98b48509bb6715e5fd06c85a4068e7049027b4aa5758376754dd7b2ba58bff9e3e4e1bfd061b285589775fb49b4eb51b9975b74295c767d1058f646303e9a205","ssdeep":"384:zc8MM6+TugOMP8KrgaG00aDUL22l9vKMohHHanzy:DfX7OergaGPa+24KMma2","tlshash":"76524b8fc7c23e8f9159746573e331606ab2185af4209b9f8f4ba22d4c434807e35fa1","first_seen":"2026-09-14T19:09:30.309505Z","last_seen":"2026-09-14T19:09:30.309505Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":94,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/2026/icons/icon-support-doc.png","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.801Z","timestamp":1789412926801,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/2026/icons/icon-support-doc.png HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 12562\r\nLast-Modified: Mon, 14 Sep 2026 08:54:30 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b646-3112\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12562,"size_decoded":12812,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"01d229e9d225f0f99860b713e603a912","sha1":"2f88874bd9623d4f8e466d6b270d2b587be38573","sha256":"31fd9c1c2446b582caa8f73c8b380e8b0d4732293e0d185328d75b78d0620ca1","sha512":"9d5f9e3a265553b806b606dc50622086a14b0e0c158cf1c1ba1cd2d6cff9ac98651c488d59bbf0e94b5b10d9cea8b46218a03cba8236e2a291c109d1b6136e6a","ssdeep":"192:bcDpQzlICcLZglS4VWQ+0lSIQlkmDRb5NDB8w1cdUaHKzFqNUCm7f:AyzlVcLZgIq1QlkmDD8ScufzFqNUCy","tlshash":"f8428d18d2d60073322201a5e43f606a98e4a2723401d9f71afe784f95bbfd1adb9df1","first_seen":"2026-09-14T19:09:30.31193Z","last_seen":"2026-09-14T19:09:30.31193Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":108,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/2026/icons/icon-it-support.png","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.806Z","timestamp":1789412926806,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/2026/icons/icon-it-support.png HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 22446\r\nLast-Modified: Mon, 14 Sep 2026 08:54:30 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b646-57ae\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":22446,"size_decoded":22696,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"0b991d5a18abf8bba53527cd558d6e70","sha1":"0c42c02e36a3e9e2d4663127fb8a967ff502ea08","sha256":"e606e74277a1bf37d2ea7795c0608f6f1dbb11ae095e25d8d77656dcf3863fa3","sha512":"4d0c54fc7a93946462cb5141528cda6989241544189e1ca83a18221a0ffbe8ec91efee5f73327aca75eff27d89bf382610853df22c2cecb2c7bd28ead91572e0","ssdeep":"384:QKnA6WM7NJpqe4p1t65g/Uj1pUcaP0OCPN94UTMOIE/47K3ZBVX:dX77pY7yg/YtaP0OCFKUHP/47uX","tlshash":"79a2aeb3c6003ea2239e9e4533ea68554a2fc465e7778cc91922d3f0f0dcf70b901a1a","first_seen":"2026-09-14T19:09:30.314495Z","last_seen":"2026-09-14T19:09:30.314495Z","times_seen":1,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":129,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/health-insurance.png","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.787Z","timestamp":1789412926787,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/health-insurance.png HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 4336942\r\nLast-Modified: Mon, 14 Sep 2026 08:54:26 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b642-422d2e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4336942,"size_decoded":4337196,"mime_type":"image/png","magic":"PNG image data, 7000 x 3938, 8-bit/color RGBA, non-interlaced","md5":"c6b6d1f3ae5808f4602dece586f5322f","sha1":"4fd75f05f997e36d43b8cc44c70423a8f130db3a","sha256":"14ba9c1eefddee99bfb1ce9f6daf811df1ed29272cb54ef714c0f8934b790277","sha512":"eb3e279940b5628a62805cb69bbfbee864c5ae5ef88400cea56e9cb0cbccf9fe6dd9fc0f5626557c84accd74a0303fcfbd5f7cb27877595c2d73097bab89af00","ssdeep":"24576:e6FOYnV9atjyY686I7LdZFi39ZrRiUsnAxoCt6i/5sv:e6Fct2rI7X4H8Adt6ihI","tlshash":"692501ec7df5dd8bd34f8870b85dbbd9866bb5e5a990349070e1849b1838b02b3ac534","first_seen":"2026-09-14T19:09:30.31728Z","last_seen":"2026-09-14T19:09:30.31728Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":19,"send":0,"wait":19,"receive":224,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/2026/icons/icon-marketing.png","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.805Z","timestamp":1789412926805,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/2026/icons/icon-marketing.png HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 13994\r\nLast-Modified: Mon, 14 Sep 2026 08:54:30 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b646-36aa\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":13994,"size_decoded":14244,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"0ff3ea583cf5905e07b603f9fea60a77","sha1":"233db0991613807e83aedf76da01f74619dd9d07","sha256":"d6872cbe3f5226876e7e10fbdb669225430ea8538658460175a1c3c6bf785cd1","sha512":"087e74fad9d93b98c50fdcfbfe8151edf14d67a22256734c7e4bf77b6cd142be81e2ff6f97aebd6c8af218862fe3dd9b95000099a31b1118a60cd26959e2005e","ssdeep":"384:4XhcswbQQPkca6kORcuVkT9bMgbTNZgbCYm15/JkLp:4XXsQQMca6kEcuVkJbFvgbyMLp","tlshash":"58526c43c5da3107a10011c25f937990e5b1de9f33819fef8f61e56aaa43589fab0c97","first_seen":"2026-09-14T19:09:30.319278Z","last_seen":"2026-09-14T19:09:30.319278Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":111,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/tag-bundler/api/v1/fonts-cache/googlefont/woff2/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecnFHGPc.woff2","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.881Z","timestamp":1789412926881,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /tag-bundler/api/v1/fonts-cache/googlefont/woff2/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecnFHGPc.woff2 HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/assets/styles.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 7900\r\nLast-Modified: Mon, 14 Sep 2026 08:52:07 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b5b7-1edc\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7900,"size_decoded":8164,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 7900, version 1.0","md5":"43751174b6b810eb169101a20d8c26f8","sha1":"7e48d54b1df1d3f657fc90227590308183ff9ddc","sha256":"3dc5d0c52428fe1696264907a1054ebbaac07f8cbe45832c105f819c2ae397c0","sha512":"a56307976583f9f0dd41ea34a3878c1fd69d5f89577664c350be014f6485da077cecf03f315104dc00e3cb0b6036d9b58e602ca19e963bf500016f090ca80ff2","ssdeep":"192:J2+QXwv9y8UEem7iQD+hqsNl3ahSFsd8Rq0s+Hxf49:J2+9vI8XX+DxrFe0/f0","tlshash":"dcf1bffef23115d580b66bb6c307bf24d9298147fc772608a61c6978a4e9f0c194cf0a","first_seen":"2024-03-26T19:18:23Z","last_seen":"2026-09-19T14:48:27.249768Z","times_seen":27180,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/2026/favicon.svg","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:47.388Z","timestamp":1789412927388,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/2026/favicon.svg HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:47 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 491\r\nLast-Modified: Mon, 14 Sep 2026 08:54:29 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b645-1eb\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":491,"size_decoded":742,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4d6c184d04e54fc7b0bc838d47e4d8a1","sha1":"a19ebcd0c784ceb3c8dc6bf9fee505a0ffd90970","sha256":"2ef1ad6f368af659bfb799490b5beb82937d5ab15e806718b62f625f05e96e83","sha512":"b1506181c53f67be82f7fac208d77c561c9c1cc25d2dc5eb612b73e14051a4c667410c782d658b9676aa6cc62d3a874c84be2a0939136b901ea6dae17fce36ea","ssdeep":"","tlshash":"bbf05c56c0d9ca1ad50ccb09df0ef0a9261b84c780d6c254f19daf492f569e399073dc","first_seen":"2026-09-14T19:09:30.327012Z","last_seen":"2026-09-14T19:09:30.327012Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-14T19:08:46.621Z","timestamp":1789412926621,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: text/html\r\nLast-Modified: Mon, 14 Sep 2026 08:52:06 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6aa7b5b6-bf6f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49007,"size_decoded":15633,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4182)","md5":"ff1f3f044def5dca9fdec6fe75cbe705","sha1":"09255cff335806c2ce3a3610b563180abab986f1","sha256":"ab56db1ddf92f29910c49fbf44212253ae94063507f5fca1c38093fd4265b6c3","sha512":"12df129d92fe1688e2f86a1a288b5be951a58f15cbf39ec4e4e0e43034bd3558047a032e75fb53dafff5d9b426c5ccdff194a1228d94577f8ade64d7025edcfe","ssdeep":"768:EKMIIs98qxggDPwwRUvs9EXoewi3nz74dunrgMuUqxab:aIIsaqSgiEEXLXEAqx0","tlshash":"fc233b61d1f07aff618743e6bfa066953f94c11bfa050440b67c8bac6fe2c49ca23665","first_seen":"2026-09-14T19:09:30.329577Z","last_seen":"2026-09-14T19:09:30.329577Z","times_seen":1,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":4,"connect":19,"send":0,"wait":39,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/culture-course.jpeg","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.784Z","timestamp":1789412926784,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/culture-course.jpeg HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7595446\r\nLast-Modified: Mon, 14 Sep 2026 08:54:28 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b644-73e5b6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7595446,"size_decoded":7595701,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=16, height=5760, bps=206, PhotometricInterpretation=RGB, description=Confident businessman executive coach in casual clothes using laptop computer, having video conference call virtual meeting, pr, manufacturer=SONY, model=ILCE-1, orientation=upper-left, width=8640], progressive, precision 8, 5000x3333, components 3","md5":"255f852f319ea45559944c05db2b7bfc","sha1":"8e54fb3638384f19132baadb407f6fa77b1649fd","sha256":"85ad4c61a44fa5d11e37ebb7398ebc7853360a80a51c58c15d367950fb19d00b","sha512":"5b0c43b6235c55657530f352541db052302e995c7c6e2fb87fe478875a975569db42aa5f4d6e50ecc33a5f0b759f65af0e6b8689f22d45ff4b1ac8e0121f982c","ssdeep":"12288:198B7E0hhTIOERCAdxHqTpwOye8u14B7lHaNVSU6edQc/tthojDzCzgxrybAevzP:KZhGtgATKKOyHBZaPGebur1xLUzC34Q6","tlshash":"83252349eba76c32e579493fd8b90781a563bac38d93542fb95c0c122f6b0518c727e2","first_seen":"2026-09-14T19:09:30.331636Z","last_seen":"2026-09-14T19:09:30.331636Z","times_seen":1,"resource_available":false,"data":null}},"time_used":825,"timings":{"blocked":134,"dns":0,"connect":0,"send":0,"wait":27,"receive":664,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/hipaa.png","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.786Z","timestamp":1789412926786,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/hipaa.png HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 367874\r\nLast-Modified: Mon, 14 Sep 2026 08:54:27 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b643-59d02\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":367874,"size_decoded":368126,"mime_type":"image/png","magic":"PNG image data, 1200 x 800, 8-bit/color RGBA, non-interlaced","md5":"a09c550989c171d861862563524fb1df","sha1":"33b30cc8b407f0a4d19ba143c8bfd49cf1b9f13d","sha256":"a970949ea74a949ea67f0620176e3827c1cf3888f4e0d6385fa01e62a5dd5217","sha512":"990eccf1c7f962396f35549304b1df6f1fed920bcf1a8fe69cb57efc24f33f968ca69ace5fb6ea6a582274ae4e65711051eaa48f53819371a828048917aaab52","ssdeep":"6144:HJpmAesEERvsdon2pScL3UaLK2++54BW2mMDWr6aV8LuEen7IOC:pgPsR6z3Ua5++521N4aLuEK7g","tlshash":"7f742342e1e464ce01190daa77da0beebe0aaf8f345e24c68f0f197007f1a7d1656bd5","first_seen":"2026-09-14T19:09:30.333261Z","last_seen":"2026-09-14T19:09:30.333261Z","times_seen":1,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":19,"send":0,"wait":19,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/2026/img/icon-coordinator-white.png","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.797Z","timestamp":1789412926797,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/2026/img/icon-coordinator-white.png HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 10654\r\nLast-Modified: Mon, 14 Sep 2026 08:54:31 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b647-299e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10654,"size_decoded":10904,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"8598e83414b001fc3562fb88242b4d95","sha1":"b35ea57ff4992d2b870688c5443c648c5cf1858c","sha256":"bc423af0883751f6a3d62150a82df8f3d8bcf074ae7e63274654b9861be31a34","sha512":"16a66705c1e52bbfd2a0b674919e27820e3f84ce8395d71cc7a2483c435377a774d3fa1e70d4261ac0a8b730c5c1b996bc1e6ffff8bd6fbb153e51c9c094b834","ssdeep":"192:/0uCHeo0ED4UEtFsP8E76qS3QhX5eQq4CUai00q1GmcGs/hr5pd:HRvED4876q4OvWi00IG9","tlshash":"4522084fb33f4d6153109a8dab3a6e7a0dab4c6ff14eb1720064ed6186c53c7089c5ae","first_seen":"2026-09-14T19:09:30.335019Z","last_seen":"2026-09-14T19:09:30.335019Z","times_seen":1,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/2026/jpg.jpg","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.779Z","timestamp":1789412926779,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/2026/jpg.jpg HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 184964\r\nLast-Modified: Mon, 14 Sep 2026 08:54:29 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b645-2d284\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":184964,"size_decoded":185217,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1500x1000, components 3","md5":"0cb42abe448dc962c59ddcb6516b7713","sha1":"a887b11061b2cff4756b7ff0d8d734078d0da649","sha256":"2052238b16881dd5713066ad3764b2d9a47068eab6eb87afe35229336a80ec99","sha512":"04f6ed970f6be501e708d6cbbed9fb0177476e1696b1c1438837b495f079c6ec64e0b594f684774b226dda8dc6a56ecc731bdb46c4024f9b8806650efa770ee1","ssdeep":"3072:+vGnRmHbXewqN49ZnOQCuNv7o2v0Eocor8PEE6fK4+Jm/LQy4Z7GmT:aP7gN8ZOVuxJMEoRAefK4+JQLiGS","tlshash":"ab0412e743c2ad53894dbe6924f2653be2418612f499fe7a80f44b2377fdf504c0a9a4","first_seen":"2026-09-14T19:09:30.336744Z","last_seen":"2026-09-14T19:09:30.336744Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":19,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/data-protection.jpg","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.783Z","timestamp":1789412926783,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/data-protection.jpg HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2405972\r\nLast-Modified: Mon, 14 Sep 2026 08:54:26 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b642-24b654\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2405972,"size_decoded":2406227,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=7, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 10.1 (Macintosh), datetime=2020:12:16 12:47:26], baseline, precision 8, 3478x1954, components 3","md5":"7862a9c3cd49924ad5f6a0b3ef799f58","sha1":"82562f04887d91bcb7a2a743aa80df52143c9dab","sha256":"eafb70d4cbadaadfbbf52fd898635157b9e76c5782aba2cb802501d48313e808","sha512":"4890a6b4ca42f3a2e5927f3d1c248e8cd074f5733dfc5532356c651b3b513f713e71cafd4836ad77538578a9f939a712dd12de3cbc7bffafc871be365abbaccf","ssdeep":"24576:GPGDmTlC3OrcAfvrpfclnmmLivSXwiQXhLLIvbkhalt:ZDmTQ3rKvrSnL7XwJRLLtav","tlshash":"a2253328e8c2ae67b17caa374a5273de15a1b058b543ed6c347cd93c6fba8c0cc53546","first_seen":"2026-09-14T19:09:30.338148Z","last_seen":"2026-09-14T19:09:30.338148Z","times_seen":1,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":135,"dns":0,"connect":0,"send":0,"wait":27,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/2026/icons/icon-reach.png","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.798Z","timestamp":1789412926798,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/2026/icons/icon-reach.png HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 23138\r\nLast-Modified: Mon, 14 Sep 2026 08:54:30 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b646-5a62\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":23138,"size_decoded":23388,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"7a931c5a80333d64446944b47de89835","sha1":"4867c8ce61761a7cf6c12b990dec5cfb4c59e2ca","sha256":"69f19eae6b4b0bf404cbb62cf8165d9deb10a921d792cb975c01a83309ff92e4","sha512":"0e10b5762a51675bd5588202f481811b6a91051cdf089cdf8c290b416b3ba7c299e3d6e58c1a2b6a5be17530596ce0fc674c24f5de603caa8157c8c5281ab42b","ssdeep":"384:S2XUf4dFVsl+T8ngY+6CuYrAuiQkU8Rbp0780PFFhauSW23lWtWWXwBmCittD9dY:S2XUfUY+YnnBKxi/fRbmHPJauxmIvAow","tlshash":"50a2c03f704d0ea15b25120d70d640d2d91752a26727eea708dda79ba6e9ff0f1b06b0","first_seen":"2026-09-14T19:09:30.339478Z","last_seen":"2026-09-14T19:09:30.339478Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":20,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/2026/logo-white.svg","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.777Z","timestamp":1789412926777,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/2026/logo-white.svg HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 370\r\nLast-Modified: Mon, 14 Sep 2026 08:54:29 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b645-172\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":370,"size_decoded":621,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"07fadccee2f1f9fd6b670ddbdf4ef303","sha1":"744ef312d9be335e1174df8c868ca7b801db7848","sha256":"340d1555153c4dfd3422ac4728721767104e2231057417e6ac8cae605b9d8fd2","sha512":"276fab0472741782e0aa1d55f043007d19e959af5651e222839165af682fa6ce4d0bad15146b8ca68d7d0a7a889b23d3a2f8f74e0950c891ffc90b69ba7ba7b3","ssdeep":"","tlshash":"bee0c045e2848b04d1004d00331bf592a58cc0cf4844cd6df049c825e8d6d9b8b4137c","first_seen":"2026-09-14T19:09:30.341045Z","last_seen":"2026-09-14T19:09:30.341045Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kafibu.com/assets/talent-match.jpeg","fqdn":"kafibu.com","domain":"kafibu.com","tld":"com"},"ip":{"addr":"209.97.141.181","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://kafibu.com/","date":"2026-09-14T19:08:46.780Z","timestamp":1789412926780,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/talent-match.jpeg HTTP/1.1\r\nHost: kafibu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://kafibu.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 14 Sep 2026 19:08:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3453920\r\nLast-Modified: Mon, 14 Sep 2026 08:54:28 GMT\r\nConnection: keep-alive\r\nETag: \"6aa7b644-34b3e0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3453920,"size_decoded":3454175,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, description=Virtual conference with employees. A young man in formal shirt using pc for video call, he has video meeting with several peopl, orientation=upper-left, xresolution=318, yresolution=326, resolutionunit=2, software=Adobe Photoshop CC 2018 (Windows), datetime=2020:05:01 18:05:10], baseline, precision 8, 4776x3178, components 3","md5":"7f524a342ea0b87e4187936c4980fab9","sha1":"a3dab55a9b834bcf7da4dae588500e8344a3ab28","sha256":"0cbd576846f0d9781c20c9b8b9893a8b01429f03feb2e1f0cb893b70a6a7622d","sha512":"642c9a3b2ee326ae231f187f162425dbc5b0e89ecf52095095e5761df6593ab3f82e43b5e18981584b08d5519035f6b180943ff3e8e6df4c25e9a3388f3fcc27","ssdeep":"24576:5CNsAfqaN7ce5gwYAfa2G3fSbhN/owSVdCsO2MLLVd2Wh/V:orfqw7J5gdAFf/o3O2OT2WNV","tlshash":"8b252342c9ed8c0617ef332a4cd9f64189a379c9ecbc582eb6ad8a053f4464455cafd3","first_seen":"2026-09-14T19:09:30.343095Z","last_seen":"2026-09-14T19:09:30.343095Z","times_seen":1,"resource_available":false,"data":null}},"time_used":571,"timings":{"blocked":136,"dns":0,"connect":0,"send":0,"wait":26,"receive":409,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kafibu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}