{"report_id":"0b0b5962-2231-45b1-88e3-2ff98417468c","version":0,"status":"done","tags":["opendir"],"date":"2026-07-13T00:50:31Z","url":{"schema":"https","addr":"holiganbetoriginal1.icu/","fqdn":"holiganbetoriginal1.icu","domain":"holiganbetoriginal1.icu","tld":"icu"},"ip":{"addr":"172.67.196.54","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"holiganbetoriginal1.icu/","fqdn":"holiganbetoriginal1.icu","domain":"holiganbetoriginal1.icu","tld":"icu"},"title":"Index of /","dom":{"size":1647,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (526)","md5":"ef7ce9c920dfa42ecc20a0455306bb09","sha1":"692d5270c075c1ddf36c57b3c213ded839206d10","sha256":"3dc20d4f68e397e3b5784fc81b7c5ed5bb73990a1e19c2fac4a8c21cf5b2ad46","sha512":"d1c1af4c5429bbb12109bbe9b32def424d0135760b3aaeb408296318306469c86dd0412a24d09c2182f0ad7cc29708f89ff56db551d55d70b494136a718fccaa","ssdeep":"","tlshash":"1c314492f0d5403b1117a5e49118bb59e0c49129c3685d787de844d6d7e4ef48c6fdd1","dom_hash":"domhash29de43c2ed9304efd323ecc30bfc2981","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"holiganbetoriginal1.icu/","fqdn":"holiganbetoriginal1.icu","domain":"holiganbetoriginal1.icu","tld":"icu"},"ip":{"addr":"172.67.196.54","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-17T00:50:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"holiganbetoriginal1.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Audit - Open directory","verdict":"none","severity":"audit","comment":"","tags":["opendir"],"meta":null},{"sensor_name":"urlquery","alert":"Audit - Open directory","verdict":"none","severity":"audit","comment":"","tags":["opendir"],"meta":null}]},"summary":[{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-07-12T23:34:29.320154Z","alert_count":0,"request_count":5,"received_data":810266,"sent_data":3575,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"holiganbetoriginal1.icu","ip":{"addr":"172.67.196.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-07","domain_rank":0,"first_seen":"2026-07-11T14:37:42.413335Z","last_seen":"2026-07-11T14:37:42.413335Z","alert_count":12,"request_count":11,"received_data":364147,"sent_data":10132,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Audit - Open directory","verdict":"none","severity":"audit","comment":"","tags":["opendir"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/80a697ecdece/api.js?onload=zzCI2\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"695698c613d35c433471c55525a0be78","sha1":"a4c5a51074996c0e6108c8e518bc871d5570745a","sha256":"5c5c445b67e1cb710a98338a2ee3631506a50351a355c9cbcf455c8fc48a21f6","sha512":"0340b6beb6180c0c059434884905597fddeaee363a7eb1ffe25847ef2da909747bb33d9ac598cb690c504de45697829966d7e3c9a5e21602b916af49d2fff1a5","ssdeep":"1536:tMAA+jXpq5RDMDpydrdopXOe1C05V4tMlsgV0Di0w58B:t1tYR0ydrMXOe1ldlP0Di0w58B","tlshash":"bd732bc472aa7862139ac0f4913b6753b3257d3aa84c8850d467dc653b7cd869233fbe","size":75049,"data":"","first_seen":"2026-07-12T22:51:46.413958Z","last_seen":"2026-07-14T22:25:10.483613Z","times_seen":2830,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-14T22:16:23.882503Z","times_seen":774902,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holiganbetoriginal1.icu/?__cf_chl_rt_tk=UUx.lKyFlawwXZgEqmjH3W7O5OA_On5fffei3zccxm8-1783903802-1.0.1.1-1G0cfBognJKbrhuSkTzNp_dIaCGruEX0oxd0UEaHwIg","fqdn":"holiganbetoriginal1.icu","domain":"holiganbetoriginal1.icu","tld":"icu"},"ip":{"addr":"172.67.196.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-14T22:16:23.882503Z","times_seen":774902,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holiganbetoriginal1.icu/","fqdn":"holiganbetoriginal1.icu","domain":"holiganbetoriginal1.icu","tld":"icu"},"ip":{"addr":"172.67.196.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"af6dd0ebb6b60ddfd800290f1d54713e","sha1":"c371647e95a27f9e49c5581b1b0994297f307071","sha256":"54463da27ebf2d7fc873aacb4aa0e2569ffed0841879618fcc198a9be9019c64","sha512":"646edb93f4a4ad09acaed2a0b732a1827ca5cda9146c1d6421b5258371c411c8a76a71866755345885d7046b5aff789b99186d596fe2369faac82c2f5c3918e5","ssdeep":"3:N/BKL1X1MUn:eL1FMUn","tlshash":"295504c0544030704c50c405d1f45415500555041535444d70dd44d4173040400505c4","size":1337359,"data":"","first_seen":"2026-07-13T00:50:36.240481Z","last_seen":"2026-07-13T00:50:36.240481Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holiganbetoriginal1.icu/35d37484-8e23-4a45-b05f-92b04708dd75","fqdn":"holiganbetoriginal1.icu","domain":"holiganbetoriginal1.icu","tld":"icu"},"ip":{"addr":"172.67.196.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"12a73182cb7b679ff84e21e7bf09d27a","sha1":"d716ab2b29547c960871672d6ed4530e52545899","sha256":"d7973d089c07e09a74e84f139d17515e78d4960d8b56f82ce5f4ddb303d2f8e9","sha512":"069e89de2214a608cce421d4efac73947445be9005615aa416eae6b841d4ce1e644d37459429143cce03307851a7762bb9080e7cf020dd5eca29fb9979c844c6","ssdeep":"","tlshash":"abd0cd0a3d71d70882a221337c7f3526d1656264654d52445739cef9cb506af2524f54","size":291,"data":"","first_seen":"2026-07-02T08:33:31.153985Z","last_seen":"2026-07-13T08:43:15.658016Z","times_seen":9285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d48c7bb97b73d3d49c38db29034aa4d1","sha1":"b1550c3b870576f7ade990ae933de7bb4d12888a","sha256":"1329538f48c9d5c67df1c5d9789d9b40a710240acc951c63b3d764b6692687f3","sha512":"df50da01468582d7a016f4f062981cb241f77d7aa202ed947cb677f1753e376b52654594e689108e2e649bb4c86e7ba76c96a6534332bddf4b606e9ad7c3736a","ssdeep":"","tlshash":"d2c02b883bc4e014c34525355c6f43c6fa38df600c481083e4024149b9b471003def1f","size":137,"data":"","first_seen":"2026-07-02T08:33:31.180267Z","last_seen":"2026-07-13T08:43:48.207716Z","times_seen":9553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holiganbetoriginal1.icu/","fqdn":"holiganbetoriginal1.icu","domain":"holiganbetoriginal1.icu","tld":"icu"},"ip":{"addr":"172.67.196.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-14T22:16:23.882503Z","times_seen":774902,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holiganbetoriginal1.icu/","fqdn":"holiganbetoriginal1.icu","domain":"holiganbetoriginal1.icu","tld":"icu"},"ip":{"addr":"172.67.196.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d48c7bb97b73d3d49c38db29034aa4d1","sha1":"b1550c3b870576f7ade990ae933de7bb4d12888a","sha256":"1329538f48c9d5c67df1c5d9789d9b40a710240acc951c63b3d764b6692687f3","sha512":"df50da01468582d7a016f4f062981cb241f77d7aa202ed947cb677f1753e376b52654594e689108e2e649bb4c86e7ba76c96a6534332bddf4b606e9ad7c3736a","ssdeep":"","tlshash":"d2c02b883bc4e014c34525355c6f43c6fa38df600c481083e4024149b9b471003def1f","size":137,"data":"","first_seen":"2026-07-02T08:33:31.180267Z","last_seen":"2026-07-13T08:43:48.207716Z","times_seen":9553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a724339de28f186901d9591a3e9d8a1","sha1":"b3dbd7ed6e11941262400c11643a72d51c935f0e","sha256":"1ecff4aae54ced0195abb563e5e8e7662299ba0b57a0f1dd882ea7dda32700c0","sha512":"c5dc27581d5afa9e9c4576c3e058f476b613de2594d9a079f94e086970219a1a685d3742ccdb192d91adfb37f3520213e02fc80715b6cf832ecde48fb7429441","ssdeep":"3072:7omoDlk0FjFc7TOzKYrSpNmgSoIcYStO52n/LKuAZVG3nXaOQEqYdZoUlytvdOIE:J89SGHSpNmIm52zx/","tlshash":"3834e7c678c7fb2f638692e4047b30fbb61e4c64501e18d9d11191f9beb0379a62ae5c","size":238843,"data":"","first_seen":"2026-07-13T00:50:36.242359Z","last_seen":"2026-07-13T00:50:36.242359Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/a268f07e-c6e0-4452-a520-35bfb550187f","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"12a73182cb7b679ff84e21e7bf09d27a","sha1":"d716ab2b29547c960871672d6ed4530e52545899","sha256":"d7973d089c07e09a74e84f139d17515e78d4960d8b56f82ce5f4ddb303d2f8e9","sha512":"069e89de2214a608cce421d4efac73947445be9005615aa416eae6b841d4ce1e644d37459429143cce03307851a7762bb9080e7cf020dd5eca29fb9979c844c6","ssdeep":"","tlshash":"abd0cd0a3d71d70882a221337c7f3526d1656264654d52445739cef9cb506af2524f54","size":291,"data":"","first_seen":"2026-07-02T08:33:31.153985Z","last_seen":"2026-07-13T08:43:15.658016Z","times_seen":9285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holiganbetoriginal1.icu/","fqdn":"holiganbetoriginal1.icu","domain":"holiganbetoriginal1.icu","tld":"icu"},"ip":{"addr":"172.67.196.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ec78de3517dd1b8a7c044b9352b26bb1","sha1":"95cd3073ab4b31a094cb3d49698fec9e9a079a21","sha256":"ab1f8ca581ed8df4863f1378c69ea82393daa5a5cf0f36d63d071a7488a23972","sha512":"0badc37065fd4e7f527b44252cd3889df525643bcfbdd3cf3ad0d101198ea224d92e3640d2584d341d2460d387ae2cf976f001def7082a7306eb6cb11cdde454","ssdeep":"3:N/BKL1X1B:eL1FB","tlshash":"525504dc544030700c51c445d1f11415500515001535040570dd44d4373040400545c0","size":1337359,"data":"","first_seen":"2026-07-13T00:50:36.243541Z","last_seen":"2026-07-13T00:50:36.243541Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holiganbetoriginal1.icu/","fqdn":"holiganbetoriginal1.icu","domain":"holiganbetoriginal1.icu","tld":"icu"},"ip":{"addr":"172.67.196.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ed0178d7cbc38bc6f1bd30ba0ec8d83f","sha1":"4b8cf0d3d58ba7ce3cf56d51935aa40f211dac0b","sha256":"c55f8d419a11db22b70259c2fdd2cb6e61ea4cd5ec2051a9d51243b403d08ab3","sha512":"edccb48e3966983caf3a84279dff20e1fb346a2684dbe27435887e5bff13e8f0aa1ae3a8616ea6df270764688f47b7cd3449d63e358ecf7fba64f43177284210","ssdeep":"3:N/BKL1X1ze:eL1Fa","tlshash":"9f5504c05c4030700cd0d407d3f015155405550015350405f0fd45f417300040050dc0","size":1337359,"data":"","first_seen":"2026-07-13T00:50:36.244671Z","last_seen":"2026-07-13T00:50:36.244671Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holiganbetoriginal1.icu/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a1a44a8e4c0e56ab","fqdn":"holiganbetoriginal1.icu","domain":"holiganbetoriginal1.icu","tld":"icu"},"ip":{"addr":"172.67.196.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"84f3de2a65e7cb89f0d74a58c2161d06","sha1":"ad60753db48aa11a835894024ed0aef596196a8d","sha256":"f152e302d43136969bc93fed02bff39ba48a996db8105f21823ec40e7154da26","sha512":"dad286c0450ef062a78d3c85428289eac1cf2038d2bfe9f943e84f16ca324fa59028d5d1ee1437ed7d2e372ed9a891f33ec48c9d40601776e07d88b38e137861","ssdeep":"3072:mSGKKv86S7wvb9YQ+G77SdRU77SdG+y62NeQVikwUqq4TeY0MI:mSGKKv86aYLbSdRUvSdG3ZoQvw/eYvI","tlshash":"1a24b6ca7dc2b71f67c292e84577307be65e5d88805b3ae8d15192f53eb033a902b94c","size":221884,"data":"","first_seen":"2026-07-13T00:50:36.231648Z","last_seen":"2026-07-13T00:50:36.231648Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holiganbetoriginal1.icu/_autoindex/assets/js/tablesort.js","fqdn":"holiganbetoriginal1.icu","domain":"holiganbetoriginal1.icu","tld":"icu"},"ip":{"addr":"172.67.196.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0fa71bf6cb125ddac365683ea3352cb0","sha1":"b94eeac8764b23ab614d148007c360fd2ab46f58","sha256":"6a6b3fd328d213b1c6211581fc0dd5b56dd9db878e4fee73d33f5dd699aced3e","sha512":"1264a894fd5f92c26087b5b67bcdea3068e763c2f2e6e0036370355ec75517838d31a85d4cdd9924dec0382e01c07d4cb3ff054e7c9404de74dcab7b8c9a5261","ssdeep":"192:ZYm7/XhkJFQYhxzXqCs8PycPCrpjj0vORHjPh4dwy0GpgfdlsgjjO8:MJlX+rpjj0vORHrWdhpgDO8","tlshash":"73f1fe0cb6ea32719407b4388fcf2559b224853b1408ed257d4da2816f85c395afffe9","size":7706,"data":"","first_seen":"2023-03-07T01:07:32Z","last_seen":"2026-07-14T21:18:42.907096Z","times_seen":33020,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"560f09c20b91f55c740bf5254933e1cd","sha1":"7b525b1d27de3cbe783ab2e0169cbc84930e06d2","sha256":"7cc841c227ff668227e1d356e3360ac41918f1ef0b154fa9ca4c5f7aecf7a733","sha512":"efb2926f9e5b78160663b52762ffee7eda53022691494d3edd8bbeb3a9062607b63b4888e69d51101e1e6be9db7991672002dc60bc6ede28d64a7b2a58e243a6","ssdeep":"3:N/BKL1X1F:eL1FF","tlshash":"775504d4d44030700c51c445d1f11415500515401535040570dd44d4373040400545c0","size":1337359,"data":"","first_seen":"2026-07-13T00:50:36.245842Z","last_seen":"2026-07-13T00:50:36.245842Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holiganbetoriginal1.icu/_autoindex/assets/js/tablesort.number.js","fqdn":"holiganbetoriginal1.icu","domain":"holiganbetoriginal1.icu","tld":"icu"},"ip":{"addr":"172.67.196.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"377b82a88aeda884475d40fa1051c70a","sha1":"e7619035db4c628248b82237f3a99683e29ed7a4","sha256":"5ff78b7ea9124ad40c205b606048c819dbbdc9c708105961d89859f79092cd07","sha512":"52e763c2f178f312382198012c5822788264093b797d2b8edb01777e234ce693b78dc6aad86cdcaa92b72e1158834c20fa82351c1c738dd63bee2e20c93b79fc","ssdeep":"","tlshash":"2b017b8cb1b5309d807270214f9f051d2b0a060bd8a98d8cb3cc85512fa311cd3f2aea","size":682,"data":"","first_seen":"2023-03-07T01:07:32Z","last_seen":"2026-07-14T21:18:42.907629Z","times_seen":33024,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"The next request for the Private Access Token challenge may return a 401 and show a warning in console.","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":104747},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":104747},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj183 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":104747},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj185 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":104747},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj188 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process8//obj189 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":104747},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj191 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.37251075516981746] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":104747},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":145431},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":145431},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":145431},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":145431},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":145431},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj186 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process8//obj187 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":104747},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj190 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.37251075516981746] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":104747},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":145431},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":145431},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":145431},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":145431},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":145431},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":104747}]},"http":[{"url":{"schema":"https","addr":"holiganbetoriginal1.icu/favicon.ico","fqdn":"holiganbetoriginal1.icu","domain":"holiganbetoriginal1.icu","tld":"icu"},"ip":{"addr":"172.67.196.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holiganbetoriginal1.icu/","date":"2026-07-13T00:50:02.875Z","timestamp":1783903802875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holiganbetoriginal1.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 21:56:57 GMT","end":"Mon, 05 Oct 2026 22:55:43 GMT"},"fingerprint":{"sha1":"43:DF:E0:57:09:5A:C9:3A:D6:42:05:06:08:30:A7:82:BA:B4:9D:FD","sha256":"8D:13:FF:0F:5B:B1:80:A3:74:11:07:7D:04:1D:86:63:3C:A8:54:D8:DE:85:AB:E1:9B:3E:C9:CB:7C:7D:F3:F1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: holiganbetoriginal1.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://holiganbetoriginal1.icu/?__cf_chl_rt_tk=UUx.lKyFlawwXZgEqmjH3W7O5OA_On5fffei3zccxm8-1783903802-1.0.1.1-1G0cfBognJKbrhuSkTzNp_dIaCGruEX0oxd0UEaHwIg\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-sQj6cfz6axgFuwtwf7Z3uK' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a1a44a8ffc2a56ab\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bKh%2BBDGP7zVXVs74KqJVidbwBT%2FsV9rcxlWDI4DCNETv16KJf06wlw9Tgino23PTMQGqPE0HD4yynv1jj6RYmHGgwYWWStDeBxbUKbPCk5Gkk1yB4ioJCNU0L%2B5i7wao%2FwwOdZzTsuIvOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Mon, 13 Jul 2026 00:50:02 GMT\r\npriority: u=6,i=?0\r\ncontent-encoding: zstd\r\ncf-ray: a1a44a8ffc2a56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5788,"size_decoded":5707,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5788), with no line terminators","md5":"586772d1725fa04ba290eb8df3947fc6","sha1":"3e9332718612f621ab2c6ad14917175c051619d6","sha256":"f9fe87b3eb5643988c4fe8290391cf5fb2edc0b64220c2ca3c2c7fb14ac24926","sha512":"3beceb00b03da4a5acb6d0f08f58367e9cf9967908b80dc69b8e80afda29ce2e5a02ae7fe31d8938aed188546901cf0d99cb96b18fa6b773546c317ed7f36f92","ssdeep":"96:PNyatoXZzIEb0EaW87KR+aVicuPoF/QMKbtUD0e1nl4Yzueh8Hmw:PN7tkCBm+wDuPMQbtUr1lZy8w","tlshash":"a7c15ce7da331127cfa61fa754faf3945200b251bf114481eac2e6ac12ddf4f40520c4","first_seen":"2026-07-13T00:50:36.226985Z","last_seen":"2026-07-13T00:50:36.226985Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"holiganbetoriginal1.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holiganbetoriginal1.icu/favicon.ico","fqdn":"holiganbetoriginal1.icu","domain":"holiganbetoriginal1.icu","tld":"icu"},"ip":{"addr":"172.67.196.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holiganbetoriginal1.icu/","date":"2026-07-13T00:50:03.197Z","timestamp":1783903803197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holiganbetoriginal1.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 21:56:57 GMT","end":"Mon, 05 Oct 2026 22:55:43 GMT"},"fingerprint":{"sha1":"43:DF:E0:57:09:5A:C9:3A:D6:42:05:06:08:30:A7:82:BA:B4:9D:FD","sha256":"8D:13:FF:0F:5B:B1:80:A3:74:11:07:7D:04:1D:86:63:3C:A8:54:D8:DE:85:AB:E1:9B:3E:C9:CB:7C:7D:F3:F1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: holiganbetoriginal1.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://holiganbetoriginal1.icu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-e5OOfhrwHcyFr3t1zvp01E' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a1a44a91fc3356ab\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jBzjAmyS0tNwweURn%2B76XWuths0JvKbjiOw6b40DvYizlCVThLoB4%2BXpu9RRF25FuQS9YJtUeV6GUcvVRCNwAzNxCjxicx8qAerJdgd6UhKYbvEIVnmLUwJENCzNWOY%2FsB4kzDnCOKMW6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Mon, 13 Jul 2026 00:50:03 GMT\r\npriority: u=4,i\r\ncontent-encoding: zstd\r\ncf-ray: a1a44a91fc3356ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5766,"size_decoded":5686,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5766), with no line terminators","md5":"9316e31cc47d9628189fea7981b1444d","sha1":"c94d0cf8c87f082a2dd4b843a858b4f75bfcc4a7","sha256":"e960cdcb99627e52dff3f060f3f9c4c9fcee9d3fd2f3da7c1e9fcfc661b752d0","sha512":"6d010389803b426bcf0bccb8ddaf41692c6e4d967d1ede607788d18ac46082026e234793a5daf4b139a4f184c40b5ddb200f4646ac63ccce573681000675942b","ssdeep":"96:PNy1toXZzIEb0EaW87X8mjpv4uT5+ECI1Tspl4Gn8wvg6bYzueh8Lmw:PNEtkCBsQguT5+K14p9n8wvx0ysw","tlshash":"96c14aa7ad7a902a63b61fda55fb734cb20266593f01c4d4e5e1cb2c89cde4ec0096c8","first_seen":"2026-07-13T00:50:36.228118Z","last_seen":"2026-07-13T00:50:36.228118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"holiganbetoriginal1.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holiganbetoriginal1.icu/","fqdn":"holiganbetoriginal1.icu","domain":"holiganbetoriginal1.icu","tld":"icu"},"ip":{"addr":"172.67.196.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-13T00:50:09.566Z","timestamp":1783903809566,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holiganbetoriginal1.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 21:56:57 GMT","end":"Mon, 05 Oct 2026 22:55:43 GMT"},"fingerprint":{"sha1":"43:DF:E0:57:09:5A:C9:3A:D6:42:05:06:08:30:A7:82:BA:B4:9D:FD","sha256":"8D:13:FF:0F:5B:B1:80:A3:74:11:07:7D:04:1D:86:63:3C:A8:54:D8:DE:85:AB:E1:9B:3E:C9:CB:7C:7D:F3:F1"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: holiganbetoriginal1.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://holiganbetoriginal1.icu/?__cf_chl_tk=UUx.lKyFlawwXZgEqmjH3W7O5OA_On5fffei3zccxm8-1783903802-1.0.1.1-1G0cfBognJKbrhuSkTzNp_dIaCGruEX0oxd0UEaHwIg\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2200\r\nOrigin: https://holiganbetoriginal1.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=pHHs5ZDHD4DXqg2XUo6vIyP9yWVt0oeXLMCs8qUQMG4-1783903809-1.2.1.1-GZI_TDq4sJnzxEXo.28h3hnbQGxn9eQKBSLJO_POkO.UoyRxf65i_4GxPB4TbwRyLJiXD4dkWm.BSt8iTQ3fpadaSb4iW19Uk2TLBHk_SngwC6WFDQoCHLD5d1h9Zg8Ys6CfwdCLEOBRyrueFTSDwV5j7plI9GZ6Bm8Z.r2bsycfRNLNT13MxMu2MI0.GfKvy_v2fSX2mxohZ5MjTBu0QEKJhxr_Yad.XX.chEI75VEPdmgLuuYc25KCNKL54GmSnds2.6DHDpY8ikGkgtopfBM8nbMvQ6WdR9rNUZEk8omMxJEXOkZtYBv_BUkyChbbUeadiR_tqKu5HnGqy1AgaeuY2cRkm03FYC514GAaFjd69cMXIAXizhdKfQyWcyzHBQOXspUIqubBHDeq5JaU84OthTycbz_Tdd_ORhmgoAJepGBu.QvNsuxm66euRumKv.6_Q6REi7DjLd6z4oG_1Qbq7kkBQK8x7isFXAGIbjiJAgv0uUWnE8q4wfzz3qqu\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nSec-Fetch-User: ?1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2200,"data":"53867763d7ff8a8a6c37381093004db48165130ae4879862ae4cb6644e623a40=ZHTtMyH_DrIQLQHX3lUoUjVwUdMk4giR1Vdl63ZeVnM-1783903802-1.2.1.1-Y5YBwgRON660eBvNgJkU5sPTTaL.lBOYIxQirimCjK2kMwgRIMHF_ktvUZcXut5RZmeeRs6m6bBhaHfyK0Ar27wIAtV3i1E8AbV2HF3wA3AXu8BLow2gc2GmIlMRRr76cBftd4kPXNBmHA4V3S4LP17GkNulBF30PjAzOZzjJuqKRhm2JBCsGw.HVLfgRaaH_UgqCI70vqiAdtk2Z_s7MZGFmEFlJus7NGxx96a9LnIy127x5OhOQvKEhgTue9Uy.WhsSBAY7v2QuySw8WF18lpfsO9AAMxZfswK96TjCSMENJKn563RkiyaBpNn0jIB0HtQHKwXTxxqOMmfmkhPU16eu.DTYwFVDyT3r5idf3IZGOMOVSAyrJ3reGHJ5DXQ2U4NH.9QJiBQprueEGcdhFqXZ_1jtVeJrALuENc32lsjIP8zUmX04YW2aiuT4yBs_zhWhOhPBfyqLKfW.KLJNRX8hV7FIozbKYmX.lHYu.p2LBAeR99ooZMvGdvKX315wT503rkznaEn.N1BSpHwoPziXin3mvYEi0nzx8f007uyMVTq6hrDFTnLGSzjAijRgkoxSzItfBLwI7SPe4UKnWAIsF_QDidEObJ7BDOV_kdVPXezmxBIjA9SiHnjPMcT6.u8vrWikReSQeRVyGvoMdjglU47n8RV.kUx2aGZvcszGGlOrIDzXv7Pc5yogaQbMm3XksT9DSkOPloEDjhc_d64uShXNeaLRWlLnnIOgvFbIFJV9jWAYEOd7pqHUkVNPV5xwkr8o6DvveVo.ytPl89ymo0EE.JsEVfeRoE455m1sWFRgyZF_CrilVrjk2ZnWsJkYbxRjrJrVSOwejTv4dsG.omdVvtMNaGyHqXvXMYP01EXg3y2gTeHCCUhz.MGaRFAIuQVX.AaJkSWlC1.Fu0kb4jZICUgme86H2ZwlEcfBrRI4DhIonBnkiBaezZHda44FBpRc3Vq0q4TDi66zBSDMSU9RmWOKcD.xnnbZUlVSPrY5mre7uGXZxbkcKSVfMZhd4UD17plsTx6WJjlGToDPr6XwbmjyrG6HgOq2uYIAWoIfEK6KYXTZdVhKLwwQ4UXFkkFs1BkX44PjiRI_59_H1Ka.FBh4t4aZ3y7fHA\u00265d867d5e12c08ac391eff1446c9afe307ae67628a3e416b6abe940538b498181=3FoY.BJhTCUYgTLnUNeFQG4cLUd4waBhHC.uMnPR4Sw-1783903802-1.2.1.1-uOuNedCTcNOFXHt2enmxFfhS.yUTUqM2C5ih9facFpPHhnW5lqy0re.S5RDjGDBOgxfDj.dP7TuRqINegVBUEH4OxeEIxCttM2PpVhp7WLXGXw2IB4szk52lI4kJ545Z2pFV.WohTJo6NNxlpgjhXH7SMzHkvS513VZj0O5TYamTa9TwDWeJwg3pzQSKyTUUSOkubxVaV43F3Yx1AczJTo05l8TEjWNm2WY_IVlfvKBFSdqoFT.uekwf7fKe4aw6aQtkOHDB0t3BKpY2Wuv9BU_uQDLZbEbdo_VesUblxRP3C.0r53mmhRZMLaJ4q9gdYHamFC.GBbVQEQNQluOyWyXkH1YRYNcsxA.AkvAXH0wiIA9xVSB3vVXbX7RadkdUeVDq4.DIFb9myJLFldThIb5W_eau4iKj81cMKIhsQ__3vVs8KSVeuMIMqRLHAZGhoWgKhr3wiI6gH.tlm7catbVhbFSqDyqHlw28gqTLEr4\u002666773ba41298357ba0f43e68d72384970107c1a7925518407ed7fc2e6a39912e=c.OrvAmXA10J3kTrBQxC.L6z_a1nF.Fld5m3iVCHUrk-1783903809-1.0.1.1-.hKWDJqefzs1JrNf6ILv0YSrs_GJWa3fntC_NAG9LylUodin2ErxvVVnOqn_aJfQINjQLf.y0Fhg0WZHLoGFJis9SjHiZAtfh4ejA3l9ghBoJsOrZo5eM_aMv44SQWCnm1TAHdazS088h6OOe7LxwUX_cUhDitFbvmGBLAOsxPpxG1R.CKFugFOPyXE.lRfs"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R%2BATWnxiAEx3cETTV%2B2vjcZu9naE1JnIrLjf9osy1ibpsNHfIDhoY1fDT8Vjol2qRdJmjGw3QMQR1MIc82l1IxyJ%2FYLXYsmkEREh4d816jHr8ugX4BrpE%2BzclPKO%2Bun6ZySVD8xW5EfjAw%3D%3D\"}]}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\ndate: Mon, 13 Jul 2026 00:50:09 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1a44ab9cc8e56ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1584,"size_decoded":1407,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (547)","md5":"f4d3ecbd2ea40f1d7e55280eaac83fd8","sha1":"913b6b8ce564ca30c28e6d68cfee836f411fa577","sha256":"78f742efd9f56d605d962abf60a7eeac94f92d785797b5354370b77510b9455f","sha512":"05b0e2d7567162e69eea44885c399e871dd8a1cf700d1f80bf19830f9dfa71cf89f33e6827814ad3627cd4b4d634e692d7f1eb04d2852ab2f298f86ea0eb3983","ssdeep":"","tlshash":"e8315392f0d5403b111365f45218bbaae0c4a165c3a84d7c7ef805e6e7e0ff4985edd6","first_seen":"2026-07-11T14:37:46.223437Z","last_seen":"2026-07-13T00:50:36.229327Z","times_seen":4,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"holiganbetoriginal1.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Audit - Open directory","verdict":"none","severity":"audit","comment":"","tags":["opendir"],"meta":null}]}},{"url":{"schema":"https","addr":"holiganbetoriginal1.icu/_autoindex/assets/js/tablesort.js","fqdn":"holiganbetoriginal1.icu","domain":"holiganbetoriginal1.icu","tld":"icu"},"ip":{"addr":"172.67.196.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://holiganbetoriginal1.icu/","date":"2026-07-13T00:50:09.819Z","timestamp":1783903809819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holiganbetoriginal1.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 21:56:57 GMT","end":"Mon, 05 Oct 2026 22:55:43 GMT"},"fingerprint":{"sha1":"43:DF:E0:57:09:5A:C9:3A:D6:42:05:06:08:30:A7:82:BA:B4:9D:FD","sha256":"8D:13:FF:0F:5B:B1:80:A3:74:11:07:7D:04:1D:86:63:3C:A8:54:D8:DE:85:AB:E1:9B:3E:C9:CB:7C:7D:F3:F1"}}},"request":{"raw":"GET /_autoindex/assets/js/tablesort.js HTTP/1.1\r\nHost: holiganbetoriginal1.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holiganbetoriginal1.icu/\r\nCookie: cf_clearance=pHHs5ZDHD4DXqg2XUo6vIyP9yWVt0oeXLMCs8qUQMG4-1783903809-1.2.1.1-GZI_TDq4sJnzxEXo.28h3hnbQGxn9eQKBSLJO_POkO.UoyRxf65i_4GxPB4TbwRyLJiXD4dkWm.BSt8iTQ3fpadaSb4iW19Uk2TLBHk_SngwC6WFDQoCHLD5d1h9Zg8Ys6CfwdCLEOBRyrueFTSDwV5j7plI9GZ6Bm8Z.r2bsycfRNLNT13MxMu2MI0.GfKvy_v2fSX2mxohZ5MjTBu0QEKJhxr_Yad.XX.chEI75VEPdmgLuuYc25KCNKL54GmSnds2.6DHDpY8ikGkgtopfBM8nbMvQ6WdR9rNUZEk8omMxJEXOkZtYBv_BUkyChbbUeadiR_tqKu5HnGqy1AgaeuY2cRkm03FYC514GAaFjd69cMXIAXizhdKfQyWcyzHBQOXspUIqubBHDeq5JaU84OthTycbz_Tdd_ORhmgoAJepGBu.QvNsuxm66euRumKv.6_Q6REi7DjLd6z4oG_1Qbq7kkBQK8x7isFXAGIbjiJAgv0uUWnE8q4wfzz3qqu\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 16 Aug 2025 17:49:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Mon, 13 Jul 2026 00:50:09 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 5766\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qj65OAiHhgkG1GWMJ7M0c934jRVytytUXvbOXUztxnXxol9%2B1%2BQizWR5D3wj7iGfop11aSA%2BEqyRJwn1ADLYNsjt0QeL%2BMynAoISF97X8Wc8qkXC%2BqC%2B%2FP8ic8LTjRcJV2nf8ojmTwRkvQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a1a44abb6c9156ab-OSL\r\ncontent-length: 2137\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7706,"size_decoded":2927,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"0fa71bf6cb125ddac365683ea3352cb0","sha1":"b94eeac8764b23ab614d148007c360fd2ab46f58","sha256":"6a6b3fd328d213b1c6211581fc0dd5b56dd9db878e4fee73d33f5dd699aced3e","sha512":"1264a894fd5f92c26087b5b67bcdea3068e763c2f2e6e0036370355ec75517838d31a85d4cdd9924dec0382e01c07d4cb3ff054e7c9404de74dcab7b8c9a5261","ssdeep":"192:ZYm7/XhkJFQYhxzXqCs8PycPCrpjj0vORHjPh4dwy0GpgfdlsgjjO8:MJlX+rpjj0vORHrWdhpgDO8","tlshash":"73f1fe0cb6ea32719407b4388fcf2559b224853b1408ed257d4da2816f85c395afffe9","first_seen":"2023-03-07T01:07:32Z","last_seen":"2026-07-14T21:18:42.907096Z","times_seen":33020,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"holiganbetoriginal1.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holiganbetoriginal1.icu/_autoindex/assets/js/tablesort.number.js","fqdn":"holiganbetoriginal1.icu","domain":"holiganbetoriginal1.icu","tld":"icu"},"ip":{"addr":"172.67.196.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://holiganbetoriginal1.icu/","date":"2026-07-13T00:50:09.821Z","timestamp":1783903809821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holiganbetoriginal1.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 21:56:57 GMT","end":"Mon, 05 Oct 2026 22:55:43 GMT"},"fingerprint":{"sha1":"43:DF:E0:57:09:5A:C9:3A:D6:42:05:06:08:30:A7:82:BA:B4:9D:FD","sha256":"8D:13:FF:0F:5B:B1:80:A3:74:11:07:7D:04:1D:86:63:3C:A8:54:D8:DE:85:AB:E1:9B:3E:C9:CB:7C:7D:F3:F1"}}},"request":{"raw":"GET /_autoindex/assets/js/tablesort.number.js HTTP/1.1\r\nHost: holiganbetoriginal1.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holiganbetoriginal1.icu/\r\nCookie: cf_clearance=pHHs5ZDHD4DXqg2XUo6vIyP9yWVt0oeXLMCs8qUQMG4-1783903809-1.2.1.1-GZI_TDq4sJnzxEXo.28h3hnbQGxn9eQKBSLJO_POkO.UoyRxf65i_4GxPB4TbwRyLJiXD4dkWm.BSt8iTQ3fpadaSb4iW19Uk2TLBHk_SngwC6WFDQoCHLD5d1h9Zg8Ys6CfwdCLEOBRyrueFTSDwV5j7plI9GZ6Bm8Z.r2bsycfRNLNT13MxMu2MI0.GfKvy_v2fSX2mxohZ5MjTBu0QEKJhxr_Yad.XX.chEI75VEPdmgLuuYc25KCNKL54GmSnds2.6DHDpY8ikGkgtopfBM8nbMvQ6WdR9rNUZEk8omMxJEXOkZtYBv_BUkyChbbUeadiR_tqKu5HnGqy1AgaeuY2cRkm03FYC514GAaFjd69cMXIAXizhdKfQyWcyzHBQOXspUIqubBHDeq5JaU84OthTycbz_Tdd_ORhmgoAJepGBu.QvNsuxm66euRumKv.6_Q6REi7DjLd6z4oG_1Qbq7kkBQK8x7isFXAGIbjiJAgv0uUWnE8q4wfzz3qqu\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 16 Aug 2025 17:49:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Mon, 13 Jul 2026 00:50:09 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 5766\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eFUD5Mc%2Fs4obopAAkMzfzi69tecRh1qvsdqzRHw6U1dt2r0LzHQIVHhPWsS4hbvczRkIWbwxTLvF%2FN%2Bom9oGvSate8gPx8CDSVIrkvUK9lTlkmiakrqGTj8y91eG1SLwpwbAjGRoi%2Bw7lA%3D%3D\"}]}\r\ncf-ray: a1a44abb6c9256ab-OSL\r\ncontent-length: 322\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":682,"size_decoded":1105,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"377b82a88aeda884475d40fa1051c70a","sha1":"e7619035db4c628248b82237f3a99683e29ed7a4","sha256":"5ff78b7ea9124ad40c205b606048c819dbbdc9c708105961d89859f79092cd07","sha512":"52e763c2f178f312382198012c5822788264093b797d2b8edb01777e234ce693b78dc6aad86cdcaa92b72e1158834c20fa82351c1c738dd63bee2e20c93b79fc","ssdeep":"","tlshash":"2b017b8cb1b5309d807270214f9f051d2b0a060bd8a98d8cb3cc85512fa311cd3f2aea","first_seen":"2023-03-07T01:07:32Z","last_seen":"2026-07-14T21:18:42.907629Z","times_seen":33024,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"holiganbetoriginal1.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holiganbetoriginal1.icu/_autoindex/assets/icons/folder-fill.svg","fqdn":"holiganbetoriginal1.icu","domain":"holiganbetoriginal1.icu","tld":"icu"},"ip":{"addr":"172.67.196.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holiganbetoriginal1.icu/","date":"2026-07-13T00:50:09.823Z","timestamp":1783903809823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holiganbetoriginal1.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 21:56:57 GMT","end":"Mon, 05 Oct 2026 22:55:43 GMT"},"fingerprint":{"sha1":"43:DF:E0:57:09:5A:C9:3A:D6:42:05:06:08:30:A7:82:BA:B4:9D:FD","sha256":"8D:13:FF:0F:5B:B1:80:A3:74:11:07:7D:04:1D:86:63:3C:A8:54:D8:DE:85:AB:E1:9B:3E:C9:CB:7C:7D:F3:F1"}}},"request":{"raw":"GET /_autoindex/assets/icons/folder-fill.svg HTTP/1.1\r\nHost: holiganbetoriginal1.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holiganbetoriginal1.icu/\r\nCookie: cf_clearance=pHHs5ZDHD4DXqg2XUo6vIyP9yWVt0oeXLMCs8qUQMG4-1783903809-1.2.1.1-GZI_TDq4sJnzxEXo.28h3hnbQGxn9eQKBSLJO_POkO.UoyRxf65i_4GxPB4TbwRyLJiXD4dkWm.BSt8iTQ3fpadaSb4iW19Uk2TLBHk_SngwC6WFDQoCHLD5d1h9Zg8Ys6CfwdCLEOBRyrueFTSDwV5j7plI9GZ6Bm8Z.r2bsycfRNLNT13MxMu2MI0.GfKvy_v2fSX2mxohZ5MjTBu0QEKJhxr_Yad.XX.chEI75VEPdmgLuuYc25KCNKL54GmSnds2.6DHDpY8ikGkgtopfBM8nbMvQ6WdR9rNUZEk8omMxJEXOkZtYBv_BUkyChbbUeadiR_tqKu5HnGqy1AgaeuY2cRkm03FYC514GAaFjd69cMXIAXizhdKfQyWcyzHBQOXspUIqubBHDeq5JaU84OthTycbz_Tdd_ORhmgoAJepGBu.QvNsuxm66euRumKv.6_Q6REi7DjLd6z4oG_1Qbq7kkBQK8x7isFXAGIbjiJAgv0uUWnE8q4wfzz3qqu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 19:13:27 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 16 Aug 2025 17:49:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Mon, 13 Jul 2026 00:50:09 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 20201\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7wBp39FS6NCMaRGAp3CQvCs6m9CsRzAKytoW%2FaNyQDHRzFiVRSQ7syDAFf46yQR%2FV5Aj6NabMooAvVxtxEi47tezBwW7W21PjHZZxD28rPwNDg1agTvJ1NmHsa%2BSpG6yJjj9s9JeX43L9g%3D%3D\"}]}\r\ncf-ray: a1a44abb6c9356ab-OSL\r\ncontent-length: 333\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":591,"size_decoded":1151,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5d0e817dca10aab2cb58087551767a9c","sha1":"9286a744de09b180f4d29750e5b16613280a2a09","sha256":"e52ea75a526a963a5d7371795d5dacb4ceaabfe6c77bdd9649f0b457b0d6009e","sha512":"9358d6857631857030fc8d09f0ec2a4ea9ff3c2bb8ef87b79889043d9d9afc420a2a444fba6c12d978b115ddb679124a5b05e59b5076f5c9f63e600a4b41bb7a","ssdeep":"","tlshash":"2ff0e11ac70aec3f6435cb04d3edb7c2a371b08b81501dcc89b21e7ba25d0822b565dc","first_seen":"2023-05-08T16:39:18Z","last_seen":"2026-07-14T21:18:42.908171Z","times_seen":26868,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"holiganbetoriginal1.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holiganbetoriginal1.icu/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a1a44a8e4c0e56ab","fqdn":"holiganbetoriginal1.icu","domain":"holiganbetoriginal1.icu","tld":"icu"},"ip":{"addr":"172.67.196.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://holiganbetoriginal1.icu/","date":"2026-07-13T00:50:02.849Z","timestamp":1783903802849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holiganbetoriginal1.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 21:56:57 GMT","end":"Mon, 05 Oct 2026 22:55:43 GMT"},"fingerprint":{"sha1":"43:DF:E0:57:09:5A:C9:3A:D6:42:05:06:08:30:A7:82:BA:B4:9D:FD","sha256":"8D:13:FF:0F:5B:B1:80:A3:74:11:07:7D:04:1D:86:63:3C:A8:54:D8:DE:85:AB:E1:9B:3E:C9:CB:7C:7D:F3:F1"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a1a44a8e4c0e56ab HTTP/1.1\r\nHost: holiganbetoriginal1.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://holiganbetoriginal1.icu/?__cf_chl_rt_tk=UUx.lKyFlawwXZgEqmjH3W7O5OA_On5fffei3zccxm8-1783903802-1.0.1.1-1G0cfBognJKbrhuSkTzNp_dIaCGruEX0oxd0UEaHwIg\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: zstd\r\ndate: Mon, 13 Jul 2026 00:50:02 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a1a44a8fdc2356ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221884,"size_decoded":79905,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (36006)","md5":"84f3de2a65e7cb89f0d74a58c2161d06","sha1":"ad60753db48aa11a835894024ed0aef596196a8d","sha256":"f152e302d43136969bc93fed02bff39ba48a996db8105f21823ec40e7154da26","sha512":"dad286c0450ef062a78d3c85428289eac1cf2038d2bfe9f943e84f16ca324fa59028d5d1ee1437ed7d2e372ed9a891f33ec48c9d40601776e07d88b38e137861","ssdeep":"3072:mSGKKv86S7wvb9YQ+G77SdRU77SdG+y62NeQVikwUqq4TeY0MI:mSGKKv86aYLbSdRUvSdG3ZoQvw/eYvI","tlshash":"1a24b6ca7dc2b71f67c292e84577307be65e5d88805b3ae8d15192f53eb033a902b94c","first_seen":"2026-07-13T00:50:36.231648Z","last_seen":"2026-07-13T00:50:36.231648Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"holiganbetoriginal1.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://holiganbetoriginal1.icu/","date":"2026-07-13T00:50:03.285Z","timestamp":1783903803285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 13 Jul 2026 00:50:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-frEXJapZ6lPq3e9vISINLn' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self' https://hagen.challenges.cloudflare.com https://brunhild.challenges.cloudflare.com; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; trusted-types OTUN3 default; require-trusted-types-for 'script'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1a44a928bc356af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: 3nezxdob;dur=256774, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":256774,"size_decoded":99571,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"d816ce327ffb29e4f5d08b27245a47db","sha1":"e73939e943729c9e688ffbf47559df3e4c64db65","sha256":"dcb8ee9a7db0d751834c58567ac77336453bc4d5362381c6d5e1dae45f3c9c15","sha512":"9ff5ef47bc7414e7769d8f577323e24cfabd760f6acac47f09d35e086940127a860de3c2549b6135086292c56c17598557132c9346578f034a0ccf23c33a9cf5","ssdeep":"3072:Z2XomoDlk0FjFc7TOzKYrSpNmgSoIcYStO52n/LKuAZVG3nXaOQEqYdZoUlytvdY:S89SGHSpNmIm52zxX","tlshash":"b94409c678c7fb2f738692e8046b30fbb61e4c54501e19d9d11191f9bea037da62ae4c","first_seen":"2026-07-13T00:50:36.23277Z","last_seen":"2026-07-13T00:50:36.23277Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/fo/1361061753:1783901717:5rr56DyHkbG5PvVPwPAyixymeuZL7WIcX2hJBUUlYy0/a1a44a928bc356af/jiczCO5JiyNEg5.SCNzJSal89dyrYkoUL5bIvs38KrY-1783903803-1.2.1.1-dBe.4kwQuAhpC46A9z3KAfPbTTMjuU24eyPmi_9qviLL7n5RnauWXSGgxhvu9Q3n","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-07-13T00:50:03.693Z","timestamp":1783903803693,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/fo/1361061753:1783901717:5rr56DyHkbG5PvVPwPAyixymeuZL7WIcX2hJBUUlYy0/a1a44a928bc356af/jiczCO5JiyNEg5.SCNzJSal89dyrYkoUL5bIvs38KrY-1783903803-1.2.1.1-dBe.4kwQuAhpC46A9z3KAfPbTTMjuU24eyPmi_9qviLL7n5RnauWXSGgxhvu9Q3n HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: jiczCO5JiyNEg5.SCNzJSal89dyrYkoUL5bIvs38KrY-1783903803-1.2.1.1-dBe.4kwQuAhpC46A9z3KAfPbTTMjuU24eyPmi_9qviLL7n5RnauWXSGgxhvu9Q3n\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4418\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4418,"data":"dHmx-7qVnIP2mqaqL13rUPn3H6aBn47Ai4kJITQ$B98Xby-2avsEsOdkfiCTUylUJl95eKPm-2PIZYzy9gCoApL7$WE67BmQBfYIfHC$Yv71wyB+kT$wkj2Kqr6PFERhhITEois9Wsg9JNZHOHqsxDLxADgLInkwvIfLnOOacXM-96C+mJHYjOfF9scI9iE-SOChpdmYVCH+qFqO1wj5nih6Nq95NuA+ckAUf-lFlcMIy+3xHJJkihFw5e7vviTiT4x+dBE$C1nerZMW1pkkpzwk2TBTjOXd+LZl0ZX07h9Ll6LzAE5xQ$FLS9vUvm3yXc4ccQwzpDg8yL67aupJ$hJDJjgSqo6fDGkEX2VlwIVRJUK10hAg5chSX52VKF80zjirGfk+4A5qLosmqxYzmkQBoB9eQ-Uf-EAzTVSXC-++ijFxuPrI-5G7xDylpFPaB-oI7OCumYNAsm3nu83wDGKrM6$AzccssSiDFVia1bNH-i+fqE5hqw6aNWV9n-LZ7wOgDmllrWL5lFYvX8uKX+NmGFwJ3cokuAPCJEi$frZ10XuN2$exe+AAzlTR-2IpiHr+C4pYQJgKEu2T6gm6MbibcF+24FpwJboZ8AFa1cHXDBlo0rmIZiDkrVnw4pOZqq7-LX5+-C517$y6cneS6p$WnCy$ZhVDUAsr7J6AlE3YV$9X-1NiC0LQIYmJRapWwQaCENTR1HJXNCew3kyR7aj4Cu4OYZi4PbPbQaE54YiLIBLmBzgSRNv5846zddX+76N$ir1Sl9wVumORB8ur$mx0NWsPmJCeNOonDh7VDfkc$dIm$3sBYVkfRPoRT9lp4SSd8VlRbhpmH5LFO3T$QG3H6hPjh21rp3T9mudOX++ABnOb-ZTYR9YcXr7MP2XUfvdQDLz2wovb7rMCj-RYCONHH9Gs8VJHDwA2GPXgvZU0FOxkxguMFe$7VzhdeCYA2YsSH7mUo4IkFMi6YrgmIv20ZDmEVE5SgCZiggQgKAd0eQLaAB-2dm3oSqiKRyv0HcrhcW$ykVHG60Gxsy7QBSvVdLlFgoGrTlIWPpeq7D3sHlB4vzg4TY9rlc2B6TgbGNXMq+i$cz$nkXKux1$OB5aVT60J2CPHQ46GcBCPVJH3wfHSa9q2GMyO$KR9OVKNl4B6YlxgaJIeXmVh69XY466dJKjl2XWW-ME7HZXoI5OSR0DB2xTaWN6oOTp0urWGLprjS6Ee5us0ixAPbZHiT9cMXRxQRPbqFx3wsfHPqlNsNHvEpLbXj4ssmJEf7jUn$Spl5lezrA49lSWoY5WmE8XgxAPjicN9OBOJyC+KHCmfDlZVT8GgRU9zqrW4ZUbJO3hdUNECm8ShfEYvq6c8Hx3xXZXpVbsJ8Fyw7Vq4lVNUll5X$nCSmdml63TfVC9oNo4l5pO5BPMAcOhbOnhcBFZIUYTSYWpi83O+GifTy21sf34v$ijdPJY1A5oeOAiTmk1ADkcn+DE-abvV77qYhwW1vio7S7ZqLmyA2VUAKSexsWg9i$VnAL9mjbQrnHEusXsca5QOE2F1TrcQx6HREfF1XgAIGkWAgdo4exhPVupSp5-P6hFQQY$7esmPkAZI-R2gjAGN4x0opA$dfEI24$qkKu+68z-EKeKmxvzM4mCxzVg+hNWFvJ971DNEndOTvuzecYZ6m1d2+1jgK-SMuEq1nPQ0fHPa35TaHZmkR6nbW6EqLZ3mm+lfoqo+uFQDBRUOOqAA8MaUTMicnmwxQgRDeUG+L$zLCpi1rf0+PGE4jFYODi4pWmF-xK2Ixp4qx8BqcB7QOFZQVYvOBdZOkOCljLO+pe8rvg3OZHhc84rFIRSIVs4dCmoFgSENDm+PO4oZQSsTqwgPUrIfOLVc7YA102LW9$qUvKmZhuNXClTUKymJaRKEWR9ZimhH1qD8WurYxdkBSVNjOEWup+C0msMFhXvambV8qcGaWLJs4NLKdAWTuemUo4qaByNuuW49bF73hfMV-wQjJBL+bc3dVi1H4pv1F6TqPGhosN5QRaK8gB$EfZW96bAGjlKQq7D+58d0LjuCyQE88EvFTBmOo59awfpqePGlimZT8gTHGdb507MvqiOMujQl++0eGWo0ECFubibx0VR3lXg3LOUcsf0H23fOJCqTA8P18bH5WFOPsdrfvCeQcYHx2lm1KxPoqxhwSiAeqHY8inhUXYiy0nKQuwpe8sf+VfLjL$fgNKHXlUbAh0MCZZ3lxh2K6Gs1Mipp$82w5uXFxCEKm$+fj$LdmlbFY7B$-fVmYVJkP+VrHXhjSaSeN8ONpmmUPii+WgzQNoErihJTYWHxczRaLxTf86NBdDq6r4EZQAV5XiBcvfv0TE5pF23KKnA5BmDJ7FaOeAfhWH3xh5GDDPsSz5rHi20lTO53CJHqaOLoVnzMxmAvkhOP1FaFqghKI4qEealauHMHGxwnedzAxrbTgkAuU1gV+2yglKSEhubQFK+ql6mCdWDhBonqIGf-84rR3q98oTwfSGLFRF6hDwS$3QYpY1qE143n4RWcG998nAJA+dQqKbw6VQ-LjP8AccDMC3q9GZSxnhqf8sSWedUNHnYjX$GkubPfuAjhmkk$3n1GbFMXNhA72kmqp82L6KZRODKRnl9EQBo2U12GsFYGh5fuQJDi4WPqE9Gz$4aT8Wo9hWur0n40hfF4EePK989$CXl2VqxO3bmIHeIj$6x1Iv9ghAE+K5puDn5$Mim+MdC6I$XiI7UkxkHQooF5uEf-9vJhqv+FN749V8R10V5+Vh4Sz9wbFMYX597K-HpK0PHj5T+vnHnVnByPTQy9gpAp3pgpu2YpsaR9hKZ7OjZAIBvTf-IaK92ERWs97rmBPlK7xLC3TElObxWYhDGuyo7uTvBZzypZeoXTi+8aARFdZdacu$ezp9eRhVGoNgJdMBnYQkkUmLBievV3JqeCsc6W4CG$ZKng6QHGc6UW0vb$fWwI4R2GdWIDHXVNYIxhh8BSQy2FLoHJJ92ufMzubw4$bWpkVJyWj56KswEqs8dwplJlkbxmCH4Dplyo43F4RumGcE3CGLVjBOFpfo2nIScpsdRApLrAVSIlrZmCL8Oe$A9dqxn4q-ndZIZiwT4iGbVFS4GeRBnBVzcnY2rWybFv3P9yTYKMD34aPrR$8e8S93endOh6U$4Ro5x+DZOTTZ3Xhvd9Gx3fWPNkaGJ49ATO7dNsPCre8BhdcbhRA0fkvIGvygkii2B4wHwMcMi8P0aiK2C8mwgNCFV+hOg9Fe3sndlsSTFUMGFUv5NAznPM$WlZ$HjZgE7fxR-GvTlVZfY4axwmNnx0eL-hplBZv0K-EyKYlhjfG3VfrZsvo1goVWD+RIZGHK$afSE-sk-L-9UP4qonxYBfPSSenXBigia$8Z3aOMeN19K$PH2yfuD3NJKY9Oe+WNrWbKMHb$-mcjbOdMqfpFvhCHwCbw86LRK0RSygozrijeUBhg1yd5UUS78wg3swkiRr+uFaCofyyRrsZZ-X9d7oDDeYzrUIeF8vfioVKSArM7x3uMW9ZjLUssBqpkHvhGzu0fi7wwQsKzH4leoL8loSfX2pllaEMAUDeNk2J$gVb-z91ysiS7Pe-bMNPjqVaHj7X9sBbcKTLPLw+ljnP0Ce$XGA6SXHPjX895K$TxmkqyaBOddDUWNnsWL09lU-ojlz8SILeD+dG9VMsRyo6IUduDZl75b43hJoxWyaybG0bnq-abMxGafI4kukjKNosMa7Q6Gelx+pivYYpZwUiMKkeffV+UyiyTv7yVOozr-s7XfSddPa4pPjLIYjxaBa3eTY69Xp6gVoi5nvzv+ljPaf2PDWW+9bJPWEiX4TRB3yL8-xjd2O5w8PC5Y38+izMDpJW-VgJanFbDQb7ugr0bw0f6RkNnqf7m1j43Xc8Or2WWDD-G6u6smLoVr4MDdgH2oKdPWo6dZebdM-JTE3avV4j2j1RgehXLriA70y$mj2PDjhcrEkujCRFEkn74FiRrFeqFdsIUvxiKJ0P1kod+FcFBQmMhWQxDELaqYM4-03GkxA04AczHJa90iEq2ORckGEjRgsFqdClwq693naO+CxoxqhKw$IcK91nZ80ZlMblgiPOJECfwyDyEuIq48w$axolYTUbMHBfhAZmklc3IqM1s+PwjQUT-9N+X0UV9GVrQhlzIBD+svXdzA9NAoMMSucc74bX4HVyYfok3ybd5yukM5buM6V-aUJreSPgbikkwhz05uKwCLh3knTpPxR0YK7NsQS3ECRIUDSze7hXQawDpDc1LAParIhjKVGBTlbARqDGuHN$kpBaaSvC0mv7vLTQ16Thml-RbnkPE9AkrMx$u8EmZwIiWvTanFejfB90mpyGa+no89GXS1porBAP1782epEG+NI9siG+Al8k09Tgv5huL$VuPyNSe"}},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 13 Jul 2026 00:50:03 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 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$e9CTXmu4atGQcgpIBlqpIw==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1a44a951d0c56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":474400,"size_decoded":309660,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8269655caf620feae9670c0ce4786788","sha1":"599f2cf968be86cdd25cfad47bda5b01b5adc52a","sha256":"460d0ed187c92c355ac04ef865a5f09aba38f426f07f9632283c49b8a373b41f","sha512":"352db4de9da36dc6859a09a5b9a041828ad04eaac9057c8bd11e72ebaeeb7d65fd16e2f55308a9b33ca0f1a7edd11d74dc43a42a118c33984880f6fb011bab90","ssdeep":"12288:vay1A/Vh/22chiKxSR5g22sRz7qPAmoCOotjhl1ylkUwRjaaaaaaaaaaaaaaaaat:pXLiKxSPb2sYPA1po1X1ylkHRy","tlshash":"b7a412ee83f50d5946c3565e12e174a9827c9d52f120fbc4aaf028cb740b926516ff8f","first_seen":"2026-07-13T00:50:36.233708Z","last_seen":"2026-07-13T00:50:36.233708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holiganbetoriginal1.icu/favicon.ico","fqdn":"holiganbetoriginal1.icu","domain":"holiganbetoriginal1.icu","tld":"icu"},"ip":{"addr":"172.67.196.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holiganbetoriginal1.icu/","date":"2026-07-13T00:50:09.857Z","timestamp":1783903809857,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holiganbetoriginal1.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 21:56:57 GMT","end":"Mon, 05 Oct 2026 22:55:43 GMT"},"fingerprint":{"sha1":"43:DF:E0:57:09:5A:C9:3A:D6:42:05:06:08:30:A7:82:BA:B4:9D:FD","sha256":"8D:13:FF:0F:5B:B1:80:A3:74:11:07:7D:04:1D:86:63:3C:A8:54:D8:DE:85:AB:E1:9B:3E:C9:CB:7C:7D:F3:F1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: holiganbetoriginal1.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holiganbetoriginal1.icu/\r\nCookie: cf_clearance=pHHs5ZDHD4DXqg2XUo6vIyP9yWVt0oeXLMCs8qUQMG4-1783903809-1.2.1.1-GZI_TDq4sJnzxEXo.28h3hnbQGxn9eQKBSLJO_POkO.UoyRxf65i_4GxPB4TbwRyLJiXD4dkWm.BSt8iTQ3fpadaSb4iW19Uk2TLBHk_SngwC6WFDQoCHLD5d1h9Zg8Ys6CfwdCLEOBRyrueFTSDwV5j7plI9GZ6Bm8Z.r2bsycfRNLNT13MxMu2MI0.GfKvy_v2fSX2mxohZ5MjTBu0QEKJhxr_Yad.XX.chEI75VEPdmgLuuYc25KCNKL54GmSnds2.6DHDpY8ikGkgtopfBM8nbMvQ6WdR9rNUZEk8omMxJEXOkZtYBv_BUkyChbbUeadiR_tqKu5HnGqy1AgaeuY2cRkm03FYC514GAaFjd69cMXIAXizhdKfQyWcyzHBQOXspUIqubBHDeq5JaU84OthTycbz_Tdd_ORhmgoAJepGBu.QvNsuxm66euRumKv.6_Q6REi7DjLd6z4oG_1Qbq7kkBQK8x7isFXAGIbjiJAgv0uUWnE8q4wfzz3qqu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Mon, 13 Jul 2026 00:50:09 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\npriority: u=6,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cl80gip7URhkNQBSdq3gF1B2LH%2B9XOl7%2BMQjEzyDTKrYtU2Is76UINLmX%2FnR84hJNtucHiypfcGTQfdg7qbEkTOEkhm9vfZhK4lpeQGTggoSD79o%2F3sIEZOPzTd57jyyrDudB04e8mfpNQ%3D%3D\"}]}\r\ncf-ray: a1a44abb9c9456ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1251,"size_decoded":1463,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-14T22:08:34.233999Z","times_seen":140741,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"holiganbetoriginal1.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holiganbetoriginal1.icu/","fqdn":"holiganbetoriginal1.icu","domain":"holiganbetoriginal1.icu","tld":"icu"},"ip":{"addr":"172.67.196.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-13T00:50:02.504Z","timestamp":1783903802504,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holiganbetoriginal1.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 21:56:57 GMT","end":"Mon, 05 Oct 2026 22:55:43 GMT"},"fingerprint":{"sha1":"43:DF:E0:57:09:5A:C9:3A:D6:42:05:06:08:30:A7:82:BA:B4:9D:FD","sha256":"8D:13:FF:0F:5B:B1:80:A3:74:11:07:7D:04:1D:86:63:3C:A8:54:D8:DE:85:AB:E1:9B:3E:C9:CB:7C:7D:F3:F1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: holiganbetoriginal1.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-41f27lhzv0zhsbcPoZpW7x' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a1a44a8e4c0e56ab\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nokKbqSCYwgDFGsN%2BCNOSgCS%2BWrNNUq27FOnAfeb%2FR8UxRd7SsFSJEUMLUywNvKYEFZEAk6x3AkXLAgI1fbXwUVaJN7LY%2FLmxDsZmAhjTKsh4awy9VC7eP8jPuB42hHGQaCYRxehzVr1iA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Mon, 13 Jul 2026 00:50:02 GMT\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\ncf-ray: a1a44a8e4c0e56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5691,"size_decoded":5643,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5691), with no line terminators","md5":"e44f8f45b7a8a6db565c79815d6fc195","sha1":"d2b8262f4204f95dd0e9e351cf50398bd643cf9d","sha256":"88b0f6d0c3cd114aa3da7c08ed55efa93880a6b42f76d58c0a9ba49deceaa8b0","sha512":"c0e1aebe2b281cc1fcd5bae5500c0479e5dc6e7732ce455d5cc21c42f0a8878278c6e73a910305c73733ac8bb2b451f40e4daa5b971eb30312e57eb05353acc0","ssdeep":"96:PNyXtoXZzIEb0EaW87XRfNxyJEFos76adybUoVoVyz/ciohYzueh8kpmw:PN+tkCBPoios/QLOg0io2yrw","tlshash":"eac12be3a530642adbf69be694fab3cc9120f71abf05e0a4d5d1c20e67cde4f4224154","first_seen":"2026-07-13T00:50:36.235078Z","last_seen":"2026-07-13T00:50:36.235078Z","times_seen":1,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":78,"connect":14,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"holiganbetoriginal1.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-07-13T00:50:03.385Z","timestamp":1783903803385,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 13 Jul 2026 00:50:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 86\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a1a44a939c3256af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":305,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit grayscale, non-interlaced","md5":"610058450d39c6aac0b673593c8e4626","sha1":"f57b4c27b8af6b12dd725b4031bfdf8f33f28e51","sha256":"d7d0e727ce9b3bd476e2fa2de0d46c152ad070245de4d67b525da5a1ec0c2466","sha512":"8e71275271760a11dd2ae3689b104efb057aba90acbccf875b94b0e817318e9bbf524a9e1c4a5015d9319e0f1596a1eccd5a84ed3f2b20f029230e4780e7af98","ssdeep":"","tlshash":"67a012d96180ad26c64a0236c5905120f8302042421205700043c8160422e048298902","first_seen":"2026-07-08T19:18:27.775247Z","last_seen":"2026-07-13T00:50:36.23631Z","times_seen":12,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holiganbetoriginal1.icu/_autoindex/assets/css/autoindex.css","fqdn":"holiganbetoriginal1.icu","domain":"holiganbetoriginal1.icu","tld":"icu"},"ip":{"addr":"172.67.196.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://holiganbetoriginal1.icu/","date":"2026-07-13T00:50:09.817Z","timestamp":1783903809817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holiganbetoriginal1.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 21:56:57 GMT","end":"Mon, 05 Oct 2026 22:55:43 GMT"},"fingerprint":{"sha1":"43:DF:E0:57:09:5A:C9:3A:D6:42:05:06:08:30:A7:82:BA:B4:9D:FD","sha256":"8D:13:FF:0F:5B:B1:80:A3:74:11:07:7D:04:1D:86:63:3C:A8:54:D8:DE:85:AB:E1:9B:3E:C9:CB:7C:7D:F3:F1"}}},"request":{"raw":"GET /_autoindex/assets/css/autoindex.css HTTP/1.1\r\nHost: holiganbetoriginal1.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holiganbetoriginal1.icu/\r\nCookie: cf_clearance=pHHs5ZDHD4DXqg2XUo6vIyP9yWVt0oeXLMCs8qUQMG4-1783903809-1.2.1.1-GZI_TDq4sJnzxEXo.28h3hnbQGxn9eQKBSLJO_POkO.UoyRxf65i_4GxPB4TbwRyLJiXD4dkWm.BSt8iTQ3fpadaSb4iW19Uk2TLBHk_SngwC6WFDQoCHLD5d1h9Zg8Ys6CfwdCLEOBRyrueFTSDwV5j7plI9GZ6Bm8Z.r2bsycfRNLNT13MxMu2MI0.GfKvy_v2fSX2mxohZ5MjTBu0QEKJhxr_Yad.XX.chEI75VEPdmgLuuYc25KCNKL54GmSnds2.6DHDpY8ikGkgtopfBM8nbMvQ6WdR9rNUZEk8omMxJEXOkZtYBv_BUkyChbbUeadiR_tqKu5HnGqy1AgaeuY2cRkm03FYC514GAaFjd69cMXIAXizhdKfQyWcyzHBQOXspUIqubBHDeq5JaU84OthTycbz_Tdd_ORhmgoAJepGBu.QvNsuxm66euRumKv.6_Q6REi7DjLd6z4oG_1Qbq7kkBQK8x7isFXAGIbjiJAgv0uUWnE8q4wfzz3qqu\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 19:13:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 16 Aug 2025 17:49:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Mon, 13 Jul 2026 00:50:09 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 20201\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qht5TNI668iaFArgNOmt3M7dyhpG8QoDsL0lBZQWrkxiJDt0Oi8NQuc7zd5SyHS7%2BbiuCeYPoe%2Fbsp3yNR%2F686FF3u4%2F8jAAlduiRgylHfl2soX7ubQ6NyAbdHFqJFsk1uRVX5zMxPzgrw%3D%3D\"}]}\r\ncf-ray: a1a44abb5c9056ab-OSL\r\ncontent-length: 1170\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3562,"size_decoded":1989,"mime_type":"text/css","magic":"ASCII text","md5":"590db3a115b1e82a26b09f98964030a5","sha1":"e792179b620700c09bd763ebf3b5f163fd18f213","sha256":"37e1e1cbb4256d8006ccfcc7c7c8e891276191714768291589b40483d3f0fe46","sha512":"7d79d3b49a4f691d56a8c27b123eb2b5e70eff7fc2e370b8d507c07e0bb37881f815f34a3590f6bbec81da5994ca163b02ca95d8c42dfe784fddebd36c5afaf6","ssdeep":"","tlshash":"de71842edf4028cae12ed4a8ffcce6419b1f61619e4f1eaef862251dc7891e000237c5","first_seen":"2023-04-05T03:56:22Z","last_seen":"2026-07-14T21:18:42.906513Z","times_seen":32130,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"holiganbetoriginal1.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/80a697ecdece/api.js?onload=zzCI2\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://holiganbetoriginal1.icu/","date":"2026-07-13T00:50:03.173Z","timestamp":1783903803173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /turnstile/v0/b/80a697ecdece/api.js?onload=zzCI2\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://holiganbetoriginal1.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 13 Jul 2026 00:50:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Sun, 12 Jul 2026 00:36:37 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: https://holiganbetoriginal1.icu\r\npriority: u=3,i=?0\r\netag: W/\"6a52e195.00000000-12529\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1a44a91efd5568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75049,"size_decoded":24745,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"695698c613d35c433471c55525a0be78","sha1":"a4c5a51074996c0e6108c8e518bc871d5570745a","sha256":"5c5c445b67e1cb710a98338a2ee3631506a50351a355c9cbcf455c8fc48a21f6","sha512":"0340b6beb6180c0c059434884905597fddeaee363a7eb1ffe25847ef2da909747bb33d9ac598cb690c504de45697829966d7e3c9a5e21602b916af49d2fff1a5","ssdeep":"1536:tMAA+jXpq5RDMDpydrdopXOe1C05V4tMlsgV0Di0w58B:t1tYR0ydrMXOe1ldlP0Di0w58B","tlshash":"bd732bc472aa7862139ac0f4913b6753b3257d3aa84c8850d467dc653b7cd869233fbe","first_seen":"2026-07-12T22:51:46.413958Z","last_seen":"2026-07-14T22:25:10.483613Z","times_seen":2830,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":2,"connect":10,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holiganbetoriginal1.icu/cdn-cgi/challenge-platform/h/b/fo/4268014346:1783901715:9xglYVc37426r0GOh5kX4RR7bEIsl2cuilIaOVzwTKc/a1a44a8e4c0e56ab/C6I1FoCvagitbZFsCCRknAywYScx4tNtKVIRyRU7JeQ-1783903802-1.2.1.1-wf3rMq0RZyWBiDHTbHaT_WLzQPjkKJkWMTTriOIhGB8iJDNi_qk4OSOTZiZkNCil","fqdn":"holiganbetoriginal1.icu","domain":"holiganbetoriginal1.icu","tld":"icu"},"ip":{"addr":"172.67.196.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://holiganbetoriginal1.icu/","date":"2026-07-13T00:50:03.191Z","timestamp":1783903803191,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holiganbetoriginal1.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 21:56:57 GMT","end":"Mon, 05 Oct 2026 22:55:43 GMT"},"fingerprint":{"sha1":"43:DF:E0:57:09:5A:C9:3A:D6:42:05:06:08:30:A7:82:BA:B4:9D:FD","sha256":"8D:13:FF:0F:5B:B1:80:A3:74:11:07:7D:04:1D:86:63:3C:A8:54:D8:DE:85:AB:E1:9B:3E:C9:CB:7C:7D:F3:F1"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/fo/4268014346:1783901715:9xglYVc37426r0GOh5kX4RR7bEIsl2cuilIaOVzwTKc/a1a44a8e4c0e56ab/C6I1FoCvagitbZFsCCRknAywYScx4tNtKVIRyRU7JeQ-1783903802-1.2.1.1-wf3rMq0RZyWBiDHTbHaT_WLzQPjkKJkWMTTriOIhGB8iJDNi_qk4OSOTZiZkNCil HTTP/1.1\r\nHost: holiganbetoriginal1.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://holiganbetoriginal1.icu/\r\ncf-chl: C6I1FoCvagitbZFsCCRknAywYScx4tNtKVIRyRU7JeQ-1783903802-1.2.1.1-wf3rMq0RZyWBiDHTbHaT_WLzQPjkKJkWMTTriOIhGB8iJDNi_qk4OSOTZiZkNCil\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2199\r\nOrigin: https://holiganbetoriginal1.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2199,"data":"kkZJSYSKou4sD2T2xHi3Gp4l0pVDZ4dr3fW6Fg0OdWWsRvBbu294ATOJhZb0yM5WY3QmHl5vWUNTTaIJK32BWz5J2VhC5-gDEcmrTtwApbV4J-hXiz-dTCalJmHFJZHRk+27SoeHC-kORqX2w4pMRVicdr$o$H65i2abs35GlLIHchNRmVZj$klC$SDWOmB9s$6kub2KXVlHeRZRcsHNogg$JOy3H0BZ4Lt39fJm23fn9ZeMJYDm+W7Oi2ytwg61mzd2H-HAjjV1m7qWKMGASqJMijuewZfW-dRybWkZOn-7BA7f6LiNsm9DIy-M1AfaNLTzgHujKZP7oBuplHNGKGX+3m0S6RI9a+-dIGkqFZ+LA-A4m5sKdLNThe5ULA01ALEnrr$krUTI+wmOtlW0+IdGWIIRhhtr+eUYsEeHwoBfkAF6rINf6b20ybh$UPMW-T6EAvErbUL3WnmuEGKUaUIB4KXqUGWT2OhC+5ccXOtA9jPzP-dCLfCbkoZKpTVllgHobsBzuAAzpAeEAu3B9Ppf39F1--XKR3g2KsKCmTaGkTMER4PhFJTbRDkvOKNyem$OFuV6Y9KUvkLnc0gjeLZ$rrhyiesuagqpk2JVgc0DbQSnAuTXfYO92Eekkbmhu1SWMi57X932+t$CmzwcZOB+LL+skN$6II7JdUbeQX1A-3b0zRgMlhvQPXUleamJpBRjRwte01HTVaQURxIEC$GOGl0K4y-tcqT0$yQ+ba-Cv2DCGCuM$HK+EB6eHlPuemsRJBl9LUZfJRZVjh3xjiBHL5SgAPRFeUSFaKGFg6QHHSwGe9seZiwf$Axic7AxCcQf5LvqQ5uuHUuaWF9ekb2uBaEEtmkmjG5PZWKl3L5$UrllK$MC96usPlLrYB+HSczfXX7ytAgv4$ITfW17hxhNUy2-NesZyTgTmgXCHGXRM7oxFiUcyeykuciVfjRJG4B1BfsI52Y1E1TigSorON5gRNIdCytgGgEhR1kwslTGBXJyuxYpr6RV+jj5rIdJH3c6vlFSyrDRXQzDxpia66P9BwI9KKXm-iQq5V4ixcuA3dI-SmySkmskaSTZsHyzQDqiMltAsFlqqJIv3Wu4$RyCQV9AmUpF51FqwBKrhgiW+TsZNAIuoKblOuH30cYi3FcHFXSM1FV5BhvDE0TFF6EvHvV-0DuZDA5ioafkL949Bu+Imhfv+760XfYnQiS4i0sy1DOqy+gGdQoC03-mCxoWQhWaxteKuHSdpghRjo43OqcOmWXPzcyt53exPA1Cp+7dUacPO+-PrevG+u3N$4QQ2UyroFH9yVWMdDs3PEybaNzHwN1t2I7r30npARXr9IktfeamtuVxBlfpEvg7GWp4Y7ZFCb7ADE52zVtRp0Hcp2kQBwBkBhL$T333ZJDST3vzyktoCQhqqtQQG+$Lupyz9yeVD3W6UUyKhDomYTtcyN5JrlhpoZspetZiVIhVL$JIe9cR9WErJSTMjDLFywQHMrMX4FpFYSbYpKusoyjO$9kIt-kmVDUZtS6bM1DjJK50iR5qoV32HAksDw7fo9pmRK+Apey0zEI64X0YmNk2+2sJxhFhDMhqt5z63VMyTiayR7xQD+bd2yBKZXAJ4ryI1sFBKP+24W00fPMMK3sdzu2ExO-Eqpf3LjRRu0tUjriI$PUFwl9EQE9U7KQnFf2wy9fGR7gfq33tAFGP5Vru4Us5e$hsSGTgVibVWGkKqWnZPHbBsbAlScTk24L97juH50JJP6XK3xPln3kjWm3gKJf26qgB9q+EdMyLcAfevI30OBy2KTMUDW90N-JdScnko4DHAD$jX2W9xwXd5gwXPs3SC9pTAXqPG6V9K6+bDB7mDOQEchu+AvIbx0D62GmDc0xp1FiRwduQkHsAmYw05laYHhULD4K6zMkhZxp57Rj4P$$OOsMr1ZgY7DXNc74DI5l7V+cq9rgmAiHnc7D6Dn1nSRy534puUcC2H3NYKsh45+0wbTwAVYPasFLpinxIAnz7xfyIicgUSdaT6XNID5UgSgrut5tAyx+CBmfRdokTwm1lMwqyumW9wF7Ys1Zmrwa5+QHXsxPjGdhX$5OTRBtiVt3RfVA9knGSvlBI3G3hT4J5vB2TQ$H1lPNS4-pDdAskbW4KqurMPSPENhE3h1e9zwshCCwiChteMPITK57QSKrBjDREQkIP9mpBzbI"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: ItSf8Qtrl6VWs3V3f/hg7wrbABZmWSHt1jHe5gzFqrk=$Yg6arh/mLFCVJeuQvkZ9zA==\r\ntiming-allow-origin: https://holiganbetoriginal1.icu\r\ncontent-encoding: zstd\r\ndate: Mon, 13 Jul 2026 00:50:03 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a1a44a91fc3256ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97756,"size_decoded":24549,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"23a6c7a9db68b482e301d57b48ba92cd","sha1":"1db8088dcaf106c86eaa5acdbc60c1b86ff0b960","sha256":"cc4d04005a9cfb00d042753eca0db1b5821b251d3e35585415b661b36802c8a8","sha512":"630d710c691712196dcd69c59ab6365191ef28077809274c065eea8d7505271b2519911c00479b640a144e22db138527b1042c17229f12c0740b85398c1741f6","ssdeep":"1536:Rl/iuhp9M0gNfHE3LrinDrinerinerinerineringr9b:Rl/30Mbr2rvrvrvrvrjr9b","tlshash":"fba36d80c558da2e4460a037597be1c3f896b995c98df7ff86ef029981ec4e4053ca7e","first_seen":"2026-07-13T00:50:36.238331Z","last_seen":"2026-07-13T00:50:36.238331Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"holiganbetoriginal1.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/a1a44a928bc356af/1783903803707/07238d6f1a8ac82486bb2ede4e57e4493fe7d6e022092f14587fd57bbd2b0147/Y7LmphuaVd7zgk7","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-07-13T00:50:04.066Z","timestamp":1783903804066,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/pat/a1a44a928bc356af/1783903803707/07238d6f1a8ac82486bb2ede4e57e4493fe7d6e022092f14587fd57bbd2b0147/Y7LmphuaVd7zgk7 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/gg0gt/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T22:18:35.864701Z","times_seen":17248888,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
