{"report_id":"0d57d9aa-5af4-4208-9207-fe3c88846e56","version":0,"status":"done","tags":["suspicious","telegram_bot"],"date":"2026-06-11T00:32:36Z","url":{"schema":"http","addr":"i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","fqdn":"i2mind.com","domain":"i2mind.com","tld":"com"},"ip":{"addr":"82.96.137.78","port":0,"asn":199636,"as":"Free Pro SAS","country":"France","country_code":"FR"},"final":{"url":{"schema":"http","addr":"i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","fqdn":"i2mind.com","domain":"i2mind.com","tld":"com"},"title":"Sign In | Made-in-China.com","dom":{"size":49832,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5494)","md5":"1fccb0ba089296b144787be6a84eac56","sha1":"9456d9cda8e79b8501c9bbdcfd19420513697245","sha256":"430a419a56b7d74b4c7a8e654e35a84fbe4916ace11369d61650147b75d50d3b","sha512":"f0c1093d25afbabfe8f2051486ceae570206ec2bcedb1a2e65866a851c9654de2f09113cc318df2a1329c7d28e91a39da3231b02facc70e227fe8b0f42aec54a","ssdeep":"768:c/jg4/A7GKFtJdLWDbLoW+W8nrVk/zhrBvlWgE8CIHjHadfaO:caXnOzVaN","tlshash":"2323f91528f3016a31039596e3f67b35bd94e103e4429f98fb9d0acacf96e93cd07259","dom_hash":"domhashab969c214b7c9501120148ef314ec75c","first_seen":"2026-03-26T01:37:46.771224Z","last_seen":"2026-06-11T00:32:39.619408Z","times_seen":7,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","fqdn":"i2mind.com","domain":"i2mind.com","tld":"com"},"ip":{"addr":"82.96.137.78","port":0,"asn":199636,"as":"Free Pro SAS","country":"France","country_code":"FR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-16T00:32:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-11","alert":"Detects file containing Telegram Bot API","trigger":"i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-11","alert":"Detects file containing Telegram Bot API","trigger":"i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html#/captcha.micstatic.com/css/fc-verify-3.1.1-pc.css","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"www.micstatic.com","ip":{"addr":"104.18.18.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-09-10","domain_rank":635296,"first_seen":"2015-07-22T21:43:48Z","last_seen":"2026-06-09T05:22:16.31706Z","alert_count":0,"request_count":24,"received_data":262012,"sent_data":15484,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"i2mind.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2007-01-22","domain_rank":0,"first_seen":"2026-04-26T02:42:12.053573Z","last_seen":"2026-04-26T02:42:12.053573Z","alert_count":36,"request_count":8,"received_data":618222,"sent_data":3810,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]}]},{"fqdn":"captcha.micstatic.com","ip":{"addr":"104.18.18.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-09-10","domain_rank":0,"first_seen":"2023-04-13T10:12:57Z","last_seen":"2026-05-14T06:33:28.268735Z","alert_count":0,"request_count":1,"received_data":53274,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"http","addr":"i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","fqdn":"i2mind.com","domain":"i2mind.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"md5":"43d18a2a27eca3b2c29eb666a44badf4","sha1":"c7352341e9e885ad71dea9a8f562959831b3341a","sha256":"707f9ea3f01a304d6cd0d0b168ba7347c1717b4e631334cae272cfd7269ddbce","sha512":"b19c77e545045c24fb88ce2614d1eb311b02bf30a5704a0f34c44910255a33d438cdbc3001073a7bc946c4e459bbd7016025790f8b493502f4efc76e97850cf8","size":5718,"token":"7585840536:AAFNRVXtopTpkQjcuzQ0oXaWP36y_p21KFw","is_revoked":false,"bot":{"token":"7585840536:AAFNRVXtopTpkQjcuzQ0oXaWP36y_p21KFw","user_id":"7585840536","username":"Jaymoni202_bot","first_name":"Jaymoni","last_name":"","chat":{"chat_id":"5516609837","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"http","addr":"i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","fqdn":"i2mind.com","domain":"i2mind.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"43d18a2a27eca3b2c29eb666a44badf4","sha1":"c7352341e9e885ad71dea9a8f562959831b3341a","sha256":"707f9ea3f01a304d6cd0d0b168ba7347c1717b4e631334cae272cfd7269ddbce","sha512":"b19c77e545045c24fb88ce2614d1eb311b02bf30a5704a0f34c44910255a33d438cdbc3001073a7bc946c4e459bbd7016025790f8b493502f4efc76e97850cf8","ssdeep":"96:VgOo7z/EUjLLK15Vc7GrmE839NIUWzbZJ+xNHjHy5UmzRbz7Y3PM/qsam0OLKlf3:VgH7gUjLLK1IaaE8CZOHjHadfamPud","tlshash":"9dc120d91dd1c2ad370a5aef7133eae2c11aeb0d24944742b91fd8a17501733e4dd634","size":5718,"data":"","first_seen":"2026-06-11T00:32:39.636872Z","last_seen":"2026-06-11T00:32:39.636872Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-11","alert":"Detects file containing Telegram Bot API","trigger":"i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"http","addr":"i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/js/polyfill-simplify_e22603b6.js","fqdn":"i2mind.com","domain":"i2mind.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"49ef970e480c99f043080b398efb0ca5","sha1":"b80046cd86811a8189554a973d4bd94a41e7d5b9","sha256":"5711a564a155b6b3a345259007224f3212392979f7aab17fd2144c2679b7b7e2","sha512":"eacd669dc8cafff337625e55b57d58bae56f3f128a068348f1ef991f242fdd843380e361c013b6b83f9d0fd2adaffa4d5febbe8acdadec2d3f15207a7e899886","ssdeep":"768:5Q1LVR+cjjMmxzR4czlevPv/TGX3GY2JbKe0VkKpf2PcNV/z4zZGevBuh:5kLXtAWzRVzQvY3Bvh1Dx","tlshash":"eb43d6887ac2f0b687e73930805f6106f27b9972994ec1d5d25bf4d13cb490a8627fad","size":58463,"data":"","first_seen":"2024-02-01T14:48:15Z","last_seen":"2026-08-08T02:01:06.458606Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.micstatic.com/js/crypto-js.min.js","fqdn":"captcha.micstatic.com","domain":"micstatic.com","tld":"com"},"ip":{"addr":"104.18.18.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9488386137fe54503ed48cd2b448e58","sha1":"548f550283bd842e4211a8a3267f32cdd2bcfbfc","sha256":"7240cd5475358c5b144f2ba6bce789db7a5c9dbde649469cf292d0e025dd9fa8","sha512":"22a8bc0ff0607a01519c9a207914127e7ef9d4667d2dc3c1a81e091a5642d355c79bb843e74ce286d9d4bb6a6081fe8bbfab13be4cfcbab051cc459dbe8ba6b8","ssdeep":"768:0VIIeJPdERyk2PEFs+qcmCJIaoUWw3VQmmTE+VMyNlwWGg+Jn+xS2D0Onh5shWm5:9mskHDC6yiJn+xdsZ4g/ZVua/V/DyWp","tlshash":"963386501bd0688813ab5ffe373fb0e6e86d15573d558847e321fca0a59a60ae7d6c30","size":52168,"data":"","first_seen":"2024-08-20T12:27:51.742995Z","last_seen":"2026-07-21T03:20:58.69763Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"Error fetching IP:NetworkError when attempting to fetch resource.","filename":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"www.micstatic.com/mic-janus/img/login/linkedin_1f7d44db.png","fqdn":"www.micstatic.com","domain":"micstatic.com","tld":"com"},"ip":{"addr":"104.18.18.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:14.168Z","timestamp":1781137934168,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.micstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"75:FB:E5:CC:B6:39:A2:23:18:94:59:8E:AC:6E:10:DA:F0:44:E1:D1","sha256":"01:FB:F1:A1:57:6A:E7:3C:DF:B8:48:FD:4F:56:13:83:20:29:D5:C9:DF:57:A2:1A:91:CE:12:35:9D:9B:A7:90"}}},"request":{"raw":"GET /mic-janus/img/login/linkedin_1f7d44db.png HTTP/1.1\r\nHost: www.micstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/\r\nCookie: __cf_bm=igznalcjAyfXUrTMWim7bOc71QRs_02ci4C.fwB9J5o-1781137934.008412-1.0.1.1-HXP8N.443qvqReLbrZMGPG8utP2LSPxbC4uz6n8lGdj4O7S2te8u6ByKn8CRgDY3Ww8x1gaGYtxsncia7h5v7Ss6TowaFpW0PTlkhuChFPlRGnAhlDNRC1QrN598Au84\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 11 Jun 2026 00:32:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1374\r\nlast-modified: Wed, 09 Oct 2024 01:43:58 GMT\r\netag: \"6705dfde-55e\"\r\naccept-ranges: bytes\r\norigin-agent-cluster: ?0\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 2523635\r\nexpires: Sun, 08 Jun 2036 00:32:14 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a09c84788febb50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1374,"size_decoded":1833,"mime_type":"image/png","magic":"PNG image data, 76 x 76, 8-bit colormap, non-interlaced","md5":"068b8510fef06e6b112ba8665404d632","sha1":"93c286642776aa091450c848acb1727502d1b943","sha256":"116dd3ad9bacf572b448e46457a60405590df08e8c05a6e4667bd6e75bed7526","sha512":"0524e77644f97d0b4bc075105bcd9561766f162699b1f4187135bbaf828846569871d9e706e2434e82e6d9f60e59afce6f8bcbc3abfba7273e5eb28b169e2a24","ssdeep":"","tlshash":"bc2166d76980f5aacd07d5a287c0540fe93f51b9e733d2449f088a8e16b46b3e129279","first_seen":"2025-01-17T03:09:07.066012Z","last_seen":"2026-08-07T01:22:33.151591Z","times_seen":54,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.micstatic.com/mic-janus/img/login/twitter_b64cefe5.png","fqdn":"www.micstatic.com","domain":"micstatic.com","tld":"com"},"ip":{"addr":"104.18.18.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:14.169Z","timestamp":1781137934169,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.micstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"75:FB:E5:CC:B6:39:A2:23:18:94:59:8E:AC:6E:10:DA:F0:44:E1:D1","sha256":"01:FB:F1:A1:57:6A:E7:3C:DF:B8:48:FD:4F:56:13:83:20:29:D5:C9:DF:57:A2:1A:91:CE:12:35:9D:9B:A7:90"}}},"request":{"raw":"GET /mic-janus/img/login/twitter_b64cefe5.png HTTP/1.1\r\nHost: www.micstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/\r\nCookie: __cf_bm=igznalcjAyfXUrTMWim7bOc71QRs_02ci4C.fwB9J5o-1781137934.008412-1.0.1.1-HXP8N.443qvqReLbrZMGPG8utP2LSPxbC4uz6n8lGdj4O7S2te8u6ByKn8CRgDY3Ww8x1gaGYtxsncia7h5v7Ss6TowaFpW0PTlkhuChFPlRGnAhlDNRC1QrN598Au84\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 11 Jun 2026 00:32:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1486\r\nlast-modified: Wed, 09 Oct 2024 01:43:58 GMT\r\netag: \"6705dfde-5ce\"\r\naccept-ranges: bytes\r\norigin-agent-cluster: ?0\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=315360000\r\nage: 327195\r\nexpires: Sun, 08 Jun 2036 00:32:14 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a09c84789fedb50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1486,"size_decoded":1944,"mime_type":"image/png","magic":"PNG image data, 76 x 76, 8-bit colormap, non-interlaced","md5":"c632cc904feb9f3a398ebf01f78cc924","sha1":"c2ee82e399f52f76e87f51e40df13add823398bf","sha256":"f6c803a6f734d02c40eb91b67ad07ae0cd8e08f86061fbcd1843330a93dd1ad1","sha512":"0a4a663886a0cb92cbf5eae400c19a740a7f99775a5d3962a1c13cb6c95e9df723690e04a91c9410308990af6e2f87e84fd1e09b795b7a6d6ccc9dd54e7b32ce","ssdeep":"","tlshash":"5f31e9d07dd09e38cf21a432836c5249d0a7ca78d7bd426e9cc042ac2c2080989d61c1","first_seen":"2025-01-17T03:09:07.07027Z","last_seen":"2026-08-07T01:22:33.158817Z","times_seen":54,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.micstatic.com/mic-search/img/home-2019/alert-brands-new_2fc4052e.png?v=1","fqdn":"www.micstatic.com","domain":"micstatic.com","tld":"com"},"ip":{"addr":"104.18.18.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:14.174Z","timestamp":1781137934174,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.micstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"75:FB:E5:CC:B6:39:A2:23:18:94:59:8E:AC:6E:10:DA:F0:44:E1:D1","sha256":"01:FB:F1:A1:57:6A:E7:3C:DF:B8:48:FD:4F:56:13:83:20:29:D5:C9:DF:57:A2:1A:91:CE:12:35:9D:9B:A7:90"}}},"request":{"raw":"GET /mic-search/img/home-2019/alert-brands-new_2fc4052e.png?v=1 HTTP/1.1\r\nHost: www.micstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/\r\nCookie: __cf_bm=igznalcjAyfXUrTMWim7bOc71QRs_02ci4C.fwB9J5o-1781137934.008412-1.0.1.1-HXP8N.443qvqReLbrZMGPG8utP2LSPxbC4uz6n8lGdj4O7S2te8u6ByKn8CRgDY3Ww8x1gaGYtxsncia7h5v7Ss6TowaFpW0PTlkhuChFPlRGnAhlDNRC1QrN598Au84\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 11 Jun 2026 00:32:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 11458\r\nlast-modified: Thu, 02 Dec 2021 09:00:31 GMT\r\netag: \"61a88b2f-2cc2\"\r\naccept-ranges: bytes\r\norigin-agent-cluster: ?0\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 9184566\r\nexpires: Sun, 08 Jun 2036 00:32:14 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a09c84789ff2b50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11458,"size_decoded":11919,"mime_type":"image/png","magic":"PNG image data, 230 x 330, 8-bit/color RGBA, non-interlaced","md5":"787f48ab4127507aad1bbd451bb38159","sha1":"ae850d09d125b9371d641ca2f20dcbf4748c51ea","sha256":"6afdf5a36836bc6d0762459928acc315b0c0a907a63734f1914677076ffdd8df","sha512":"12a0c8e8e5ff29f1d0909e0e5fa688820c87e1b8afd10473f97da774c70216b88752ed2cb63ddbaee405911a5eb72167aca3a8d05d22275edf3e03e30bcecb60","ssdeep":"192:cFYoeD9/uKJ2R6AB3B8pbplV5NSePNSf0WYeJSuxb5rgQtPYaCQxCVpG/HgY74Bd:cFYoe0IGKPzSfJsuxV0QZHMoFADxkIjz","tlshash":"1732b07e369451508bd28f2e39c74dc9d910940e8cbbc4753a69edbbd3809705b991c7","first_seen":"2024-04-15T13:33:50Z","last_seen":"2026-08-08T02:01:06.46633Z","times_seen":138,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.micstatic.com/common/fontastic/dist/assets/roboto/400-regular/Roboto-Regular_3ca9c03e.woff2","fqdn":"www.micstatic.com","domain":"micstatic.com","tld":"com"},"ip":{"addr":"104.18.18.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:14.153Z","timestamp":1781137934153,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.micstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"75:FB:E5:CC:B6:39:A2:23:18:94:59:8E:AC:6E:10:DA:F0:44:E1:D1","sha256":"01:FB:F1:A1:57:6A:E7:3C:DF:B8:48:FD:4F:56:13:83:20:29:D5:C9:DF:57:A2:1A:91:CE:12:35:9D:9B:A7:90"}}},"request":{"raw":"GET /common/fontastic/dist/assets/roboto/400-regular/Roboto-Regular_3ca9c03e.woff2 HTTP/1.1\r\nHost: www.micstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://i2mind.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 11 Jun 2026 00:32:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19832\r\nlast-modified: Mon, 15 Jan 2024 08:51:31 GMT\r\netag: \"65a4f213-4d78\"\r\naccept-ranges: bytes\r\norigin-agent-cluster: ?0\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=315360000\r\nset-cookie: __cf_bm=tongRdnXd9UokBcjBu7GagFtaryGLfK3VaUr7rXf_.E-1781137934.155667-1.0.1.1-R76bZ8EnQ2xx_ek_URQlrozY8Dcsk8k4ZUIuk2F_1gJVnWBUq7lnEF7MZNdzQ06osa.iMCUbxxArSpwdzcO3i0hDtiqYYqCjTrglZ3CyzF.O6Gr.hdn3Jpc4uFEAqT0s; HttpOnly; SameSite=None; Secure; Path=/; Domain=micstatic.com; Expires=Thu, 11 Jun 2026 01:02:14 GMT\r\nexpires: Sun, 08 Jun 2036 00:32:14 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: a09c84787fdcb50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":19832,"size_decoded":20603,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19832, version 2.8978","md5":"ed2022705048507e5995ee72717e7fd4","sha1":"570864c3bccc3e0e203fdd67be3cf850387faefb","sha256":"e7f4f778ddb41b7be2d20810bb560acee79da55ed5d3eeac12f2bb8948f4453a","sha512":"ed1f0b98a8a9d510eee33f65aba70d59f616496f242924450a76f566b928addb86fa46f9e1056f47cbd1ae96c184cc025035e04dfc125834d7f7bf83a2fd2481","ssdeep":"384:V5mAS9ZvjYtiF8fD/Aa5zvD88AWSGlB+T22XVirh2x2/apKJR:qb+lfD/Aa5btAZGlBwdF42x2CpKJR","tlshash":"0992d1068bc674c7cab1469277a147f2d0a2fb38429ff3606a3a95b46764804d5bfcd4","first_seen":"2023-05-04T03:19:38Z","last_seen":"2026-08-08T02:01:06.462198Z","times_seen":519,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","fqdn":"i2mind.com","domain":"i2mind.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-11T00:32:13.107Z","timestamp":1781137933107,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /wordpress/wp-content/plugins/hello-dolly/bb/index.html HTTP/1.1\r\nHost: i2mind.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T07:24:29.939425Z","times_seen":17775129,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"http","addr":"i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/css/logon_2195a43b.css","fqdn":"i2mind.com","domain":"i2mind.com","tld":"com"},"ip":{"addr":"82.96.137.78","port":80,"asn":199636,"as":"Free Pro SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:13.733Z","timestamp":1781137933733,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wordpress/wp-content/plugins/hello-dolly/bb/css/logon_2195a43b.css HTTP/1.1\r\nHost: i2mind.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 11 Jun 2026 00:32:13 GMT\r\nContent-Type: text/css\r\nContent-Length: 25987\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nLast-Modified: Sat, 26 Apr 2025 03:10:46 GMT\r\nETag: \"23251-633a5cc089980-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":143953,"size_decoded":26302,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8da2079246d29b1b3981f4710c110880","sha1":"e6b3426fb4071fc5d3ae5d85356c542cdcd2b28e","sha256":"9470f5807472a83c789bb366a484df92b7647b464416b077de79ccea7003130d","sha512":"7b4a502e2a754e5af53bc2f44d055b85986499a3e177616b68db4ba1f33e1c41c6f13e78b0d76ac49ee4cb285ed5f02797b1f53e7cb2cf21a15cff3b3e825290","ssdeep":"1536:pxKslTmpSvMWSt3TQtCe/DhXx/rvvBi/hHhg:px9lstUtjDhX2/9hg","tlshash":"dfe365b1940810d93f32c522f2c1bf4d6924e222dc628ebbf09ed41dafd79785a72b55","first_seen":"2025-01-04T11:42:35.365913Z","last_seen":"2026-08-08T02:01:06.450218Z","times_seen":35,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":44,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/img/sign-default-buyer-new.jpg","fqdn":"i2mind.com","domain":"i2mind.com","tld":"com"},"ip":{"addr":"82.96.137.78","port":80,"asn":199636,"as":"Free Pro SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:13.987Z","timestamp":1781137933987,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wordpress/wp-content/plugins/hello-dolly/bb/img/sign-default-buyer-new.jpg HTTP/1.1\r\nHost: i2mind.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 11 Jun 2026 00:32:14 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 179065\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nLast-Modified: Sat, 26 Apr 2025 03:10:46 GMT\r\nETag: \"2bb79-633a5cc089980\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":179065,"size_decoded":179331,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3840x1116, components 3","md5":"2378061a605480c27fe3541065e7764c","sha1":"3abea023a7ff21d0f9b6c4a3b374f0a54e39bd41","sha256":"4eafb34f4c5e13a72981f952788d85cd177c9ab7681ff2d38d88f77bfd874584","sha512":"a826248ac4152a0b1395992b15b662b2edbe1e1fc18af95bda22509dd6d1ac88b9315c57c4b9f3754f0774f4bbd206a60d7c5a02e82222e20a67c7477c243021","ssdeep":"3072:9DZitYOuWcWLbv4s20tAkUIIKXuqMgVMKCbfjQiQdI3ajjRoKH5UQ3K/W7SDrF0j:99iuGgW3cKygYfKI309oe5UbtZ0vyRKr","tlshash":"c20412cb01641da7dae4e3f1d1878b10b8871e23d1e59ba310194e5fad54724a7bceb1","first_seen":"2025-01-17T03:09:07.058128Z","last_seen":"2026-08-08T02:01:06.441459Z","times_seen":78,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":399,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.micstatic.com/mic-janus/img/login/facebook_4487f103.png","fqdn":"www.micstatic.com","domain":"micstatic.com","tld":"com"},"ip":{"addr":"104.18.18.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:14.167Z","timestamp":1781137934167,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.micstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"75:FB:E5:CC:B6:39:A2:23:18:94:59:8E:AC:6E:10:DA:F0:44:E1:D1","sha256":"01:FB:F1:A1:57:6A:E7:3C:DF:B8:48:FD:4F:56:13:83:20:29:D5:C9:DF:57:A2:1A:91:CE:12:35:9D:9B:A7:90"}}},"request":{"raw":"GET /mic-janus/img/login/facebook_4487f103.png HTTP/1.1\r\nHost: www.micstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/\r\nCookie: __cf_bm=igznalcjAyfXUrTMWim7bOc71QRs_02ci4C.fwB9J5o-1781137934.008412-1.0.1.1-HXP8N.443qvqReLbrZMGPG8utP2LSPxbC4uz6n8lGdj4O7S2te8u6ByKn8CRgDY3Ww8x1gaGYtxsncia7h5v7Ss6TowaFpW0PTlkhuChFPlRGnAhlDNRC1QrN598Au84\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 11 Jun 2026 00:32:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1708\r\nlast-modified: Wed, 09 Oct 2024 01:43:58 GMT\r\netag: \"6705dfde-6ac\"\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\norigin-agent-cluster: ?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=315360000\r\nage: 7155315\r\nexpires: Sun, 08 Jun 2036 00:32:14 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a09c84788feab50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1708,"size_decoded":2167,"mime_type":"image/png","magic":"PNG image data, 76 x 76, 8-bit colormap, non-interlaced","md5":"78603a5f10cd44c044110133a1f3e0b7","sha1":"1cd3841b704f8848b73a4aa0fcfaf1dd96b028ef","sha256":"230b643690beb2a08e17001c66f40734d820b4821fa0ec61405247ce8d102785","sha512":"16f79c9e467887d38f2062bbeaf5aa9288716f8120f547327623ca24c8977e90dd2461c7e5d4e12b3b4d385b07d69b468977eca50cda9d9329e0153e19e7c0af","ssdeep":"","tlshash":"24313d9667518cc48d467af0b601c4d8e7e94335bf9f294e48538376043b9543585f5b","first_seen":"2025-01-17T03:09:07.06916Z","last_seen":"2026-08-07T01:22:33.150404Z","times_seen":54,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.micstatic.com/mic-search/img/home-2019/alert-brands_3b201fb1.png?v=1","fqdn":"www.micstatic.com","domain":"micstatic.com","tld":"com"},"ip":{"addr":"104.18.18.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:14.172Z","timestamp":1781137934172,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.micstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"75:FB:E5:CC:B6:39:A2:23:18:94:59:8E:AC:6E:10:DA:F0:44:E1:D1","sha256":"01:FB:F1:A1:57:6A:E7:3C:DF:B8:48:FD:4F:56:13:83:20:29:D5:C9:DF:57:A2:1A:91:CE:12:35:9D:9B:A7:90"}}},"request":{"raw":"GET /mic-search/img/home-2019/alert-brands_3b201fb1.png?v=1 HTTP/1.1\r\nHost: www.micstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/\r\nCookie: __cf_bm=igznalcjAyfXUrTMWim7bOc71QRs_02ci4C.fwB9J5o-1781137934.008412-1.0.1.1-HXP8N.443qvqReLbrZMGPG8utP2LSPxbC4uz6n8lGdj4O7S2te8u6ByKn8CRgDY3Ww8x1gaGYtxsncia7h5v7Ss6TowaFpW0PTlkhuChFPlRGnAhlDNRC1QrN598Au84\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 11 Jun 2026 00:32:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 8809\r\nlast-modified: Wed, 16 Jun 2021 11:14:07 GMT\r\netag: \"60c9dcff-2269\"\r\naccept-ranges: bytes\r\norigin-agent-cluster: ?0\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\nexpires: Sun, 08 Jun 2036 00:32:14 GMT\r\nage: 4979622\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a09c84789ff0b50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8809,"size_decoded":9269,"mime_type":"image/png","magic":"PNG image data, 230 x 260, 8-bit/color RGBA, non-interlaced","md5":"a84f4c7437a401641e035c6e4be7563a","sha1":"80623aebe5cc7ff887755525fb668e27190e399d","sha256":"239f8fb526bb18c98f21ec2c54741ecd155c47b542784e932f7932da89d5ccf8","sha512":"bb9637170f12f3d3ac260ee231a220496515874376ab4a2a45f890c6a45dc3df355c3b22a1eda09b779bcb99df6b0297d1d8ea33a244728696c4a24b3cd578ae","ssdeep":"192:ZKdAcI8OmoiKwYItalcahJFbckL451LauA55cxAX8:YI8OaKwYItahhBL45YuA5+mM","tlshash":"48029e7d40ed886191f2aebf857a49d18c5003cf0ef371ac573c5f8baa4191a90b80d5","first_seen":"2024-04-15T13:33:49Z","last_seen":"2026-08-08T02:01:06.454435Z","times_seen":138,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.micstatic.com/mic-janus/img/login-logo-header_0590c496.png","fqdn":"www.micstatic.com","domain":"micstatic.com","tld":"com"},"ip":{"addr":"104.18.18.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:14.162Z","timestamp":1781137934162,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.micstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"75:FB:E5:CC:B6:39:A2:23:18:94:59:8E:AC:6E:10:DA:F0:44:E1:D1","sha256":"01:FB:F1:A1:57:6A:E7:3C:DF:B8:48:FD:4F:56:13:83:20:29:D5:C9:DF:57:A2:1A:91:CE:12:35:9D:9B:A7:90"}}},"request":{"raw":"GET /mic-janus/img/login-logo-header_0590c496.png HTTP/1.1\r\nHost: www.micstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/\r\nCookie: __cf_bm=igznalcjAyfXUrTMWim7bOc71QRs_02ci4C.fwB9J5o-1781137934.008412-1.0.1.1-HXP8N.443qvqReLbrZMGPG8utP2LSPxbC4uz6n8lGdj4O7S2te8u6ByKn8CRgDY3Ww8x1gaGYtxsncia7h5v7Ss6TowaFpW0PTlkhuChFPlRGnAhlDNRC1QrN598Au84\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 11 Jun 2026 00:32:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 9225\r\nlast-modified: Thu, 24 Oct 2024 12:12:35 GMT\r\netag: \"671a39b3-2409\"\r\naccept-ranges: bytes\r\norigin-agent-cluster: ?0\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=315360000\r\nexpires: Sun, 08 Jun 2036 00:32:14 GMT\r\nage: 2478440\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a09c84788fe5b50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9225,"size_decoded":9685,"mime_type":"image/png","magic":"PNG image data, 872 x 168, 8-bit colormap, non-interlaced","md5":"e5917efff398afa66e760cad80b6f32f","sha1":"36e4f9ce27855a174f6822da04d869110b77f5e4","sha256":"fa9ccb43bc4db983d5d2ddfbaad8f8ab98b5a8234d66efecca5a3b5b40df11c3","sha512":"14ff40f77e526d782442521fba0cb78b3c4c3841748f29c787c7fbb3e4fbb6297740241a23240eb76bc8fa8e0aa6d771bdd6c8d080e3b6297f6e46f5c6540b01","ssdeep":"192:0LUKZlLWfS7Pzz5wX6t5XWw4y9q0h+OPzYtUA+eL934:XfS7Pag5XWw80h+mzYtUeL934","tlshash":"a112b096b2c61c2698e505954b05eaf75d3affe8f75a1cc7961600e0bf0712164c2b73","first_seen":"2024-11-15T03:31:54.455367Z","last_seen":"2026-08-08T02:01:06.465251Z","times_seen":121,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.micstatic.com/mic-janus/img/qr-normal_3697c0d2.png","fqdn":"www.micstatic.com","domain":"micstatic.com","tld":"com"},"ip":{"addr":"104.18.18.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:14.163Z","timestamp":1781137934163,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.micstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"75:FB:E5:CC:B6:39:A2:23:18:94:59:8E:AC:6E:10:DA:F0:44:E1:D1","sha256":"01:FB:F1:A1:57:6A:E7:3C:DF:B8:48:FD:4F:56:13:83:20:29:D5:C9:DF:57:A2:1A:91:CE:12:35:9D:9B:A7:90"}}},"request":{"raw":"GET /mic-janus/img/qr-normal_3697c0d2.png HTTP/1.1\r\nHost: www.micstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/\r\nCookie: __cf_bm=igznalcjAyfXUrTMWim7bOc71QRs_02ci4C.fwB9J5o-1781137934.008412-1.0.1.1-HXP8N.443qvqReLbrZMGPG8utP2LSPxbC4uz6n8lGdj4O7S2te8u6ByKn8CRgDY3Ww8x1gaGYtxsncia7h5v7Ss6TowaFpW0PTlkhuChFPlRGnAhlDNRC1QrN598Au84\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 11 Jun 2026 00:32:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1488\r\nlast-modified: Wed, 09 Oct 2024 01:43:58 GMT\r\netag: \"6705dfde-5d0\"\r\naccept-ranges: bytes\r\norigin-agent-cluster: ?0\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=315360000\r\nexpires: Sun, 08 Jun 2036 00:32:14 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a09c84788fe8b50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1488,"size_decoded":1933,"mime_type":"image/png","magic":"PNG image data, 116 x 116, 8-bit colormap, non-interlaced","md5":"b65004fe2d8b88be55282fcc27a4edb1","sha1":"adbc0c524baac92707f0132d696b95e29e68880a","sha256":"7a0374dc85a2550cc6923b539f0d06b53c858ef3418a8ee3e49406b35437be85","sha512":"673b22aa68df0c748b46b97b6f47f04350e8ed9be3719f733b50c1da2a717c75fd857affe8910b87ab81f7ce258712d6e1f0ace940d0272ed0ff076c6ad0036c","ssdeep":"","tlshash":"a331e9ce5a9a38b8de6f022ac098d481c41e5046215e9f42920cc85bfbb198fcad5d27","first_seen":"2024-11-15T03:31:54.457419Z","last_seen":"2026-08-08T02:01:06.460412Z","times_seen":79,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.micstatic.com/mic-janus/img/login/google_5d7a9b41.png","fqdn":"www.micstatic.com","domain":"micstatic.com","tld":"com"},"ip":{"addr":"104.18.18.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:14.170Z","timestamp":1781137934170,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.micstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"75:FB:E5:CC:B6:39:A2:23:18:94:59:8E:AC:6E:10:DA:F0:44:E1:D1","sha256":"01:FB:F1:A1:57:6A:E7:3C:DF:B8:48:FD:4F:56:13:83:20:29:D5:C9:DF:57:A2:1A:91:CE:12:35:9D:9B:A7:90"}}},"request":{"raw":"GET /mic-janus/img/login/google_5d7a9b41.png HTTP/1.1\r\nHost: www.micstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/\r\nCookie: __cf_bm=igznalcjAyfXUrTMWim7bOc71QRs_02ci4C.fwB9J5o-1781137934.008412-1.0.1.1-HXP8N.443qvqReLbrZMGPG8utP2LSPxbC4uz6n8lGdj4O7S2te8u6ByKn8CRgDY3Ww8x1gaGYtxsncia7h5v7Ss6TowaFpW0PTlkhuChFPlRGnAhlDNRC1QrN598Au84\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 11 Jun 2026 00:32:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1792\r\nlast-modified: Wed, 09 Oct 2024 01:43:58 GMT\r\netag: \"6705dfde-700\"\r\naccept-ranges: bytes\r\norigin-agent-cluster: ?0\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 2492734\r\nexpires: Sun, 08 Jun 2036 00:32:14 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a09c84789feeb50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1792,"size_decoded":2251,"mime_type":"image/png","magic":"PNG image data, 76 x 76, 8-bit colormap, non-interlaced","md5":"a14defcec406fd395864c1a04af6a31b","sha1":"1c02de0d7b5b5fea1a885ecf6186dceddb62f065","sha256":"df124c834c65b0fed1dca5af1520e922e35dc98465a7ffa448a971bf950e921f","sha512":"5d03a959aea07712e2027069e84b05965a02f6bdb16d57c5ba900987a1f0ae9d57b64ffbc8d1aab2da38df0bfc6f47abc29e26cffcec62846d0213c418dbda61","ssdeep":"","tlshash":"7131099325d2e0fe28b05494ab298352c6b63f2f0e0d4055eab225048da433dcb1ac5f","first_seen":"2025-01-17T03:09:07.062023Z","last_seen":"2026-08-07T01:22:33.153334Z","times_seen":54,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.micstatic.com/common/future/core/assets/fonts/Roboto-Medium_cf57ae7a.woff2","fqdn":"www.micstatic.com","domain":"micstatic.com","tld":"com"},"ip":{"addr":"104.18.18.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:14.307Z","timestamp":1781137934307,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.micstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"75:FB:E5:CC:B6:39:A2:23:18:94:59:8E:AC:6E:10:DA:F0:44:E1:D1","sha256":"01:FB:F1:A1:57:6A:E7:3C:DF:B8:48:FD:4F:56:13:83:20:29:D5:C9:DF:57:A2:1A:91:CE:12:35:9D:9B:A7:90"}}},"request":{"raw":"GET /common/future/core/assets/fonts/Roboto-Medium_cf57ae7a.woff2 HTTP/1.1\r\nHost: www.micstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://i2mind.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 11 Jun 2026 00:32:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19496\r\nlast-modified: Wed, 16 Jun 2021 11:14:12 GMT\r\netag: \"60c9dd04-4c28\"\r\naccept-ranges: bytes\r\norigin-agent-cluster: ?0\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=315360000\r\nset-cookie: __cf_bm=11VYDU0adCwnqyjvMAIEgZ1sK2mVg27IWR2QMYiSCt8-1781137934.3092914-1.0.1.1-9rs26uXACCFdL0VNB1cSxAsZi0bt.P6AXqhzH5871Ob9.sLbeQE8DWd0eZ_ZhtMZXNuRRRjntZKzEear2Tsh2zZt7H.TwgHSIyUgCtHyn.zpos37bPNKPcZTqzosnJhy; HttpOnly; SameSite=None; Secure; Path=/; Domain=micstatic.com; Expires=Thu, 11 Jun 2026 01:02:14 GMT\r\nexpires: Sun, 08 Jun 2036 00:32:14 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: a09c8479685eb50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19496,"size_decoded":20268,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19496, version 1.0","md5":"2615547d207b037b3f6b559a928afc40","sha1":"218a0ec76d21728f13e51bcf22d744db04b3169d","sha256":"43dc1bd28d4c18a569a0005609c914ed7dbe8b51258b9c4576f610bae4a04205","sha512":"f4d807378efd5299eda4200fbba250e317ae88cc7c90357b5756fb5e4a171229a89499f81a49d9e4b986807a52c631041c56a3baad4a5ac8e15da1cb950bc50f","ssdeep":"384:62krMP+K1HxxkotscTyTtIFywKD4zUEDWqktjZm6F4Y4VMzaJSejJf8:kwnFxioMt+yhDcviQ6FDsMza8ejJ0","tlshash":"3792e099ac02ba92ec04fb3e017857a612d9b45be03d8b0b60de3702bbb11ca755dd05","first_seen":"2023-06-17T21:33:35Z","last_seen":"2026-08-08T02:01:06.455433Z","times_seen":160,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"i2mind.com/favicon.ico","fqdn":"i2mind.com","domain":"i2mind.com","tld":"com"},"ip":{"addr":"82.96.137.78","port":80,"asn":199636,"as":"Free Pro SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:14.436Z","timestamp":1781137934436,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: i2mind.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Thu, 11 Jun 2026 00:32:14 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nVary: Accept-Encoding\r\nLast-Modified: Thu, 31 Mar 2022 06:59:56 GMT\r\nETag: W/\"c8c-5db7e35a63300;644e1cfcac5a3\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3212,"size_decoded":1961,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2140)","md5":"9a90f63504b7d267dae304c08dff21e4","sha1":"8e26d8a9442640522f47672e782b8820b476f65e","sha256":"df08ecea3c17448cf735e62672f7a8dc5e66cc411e620dbd2e609e730d485b48","sha512":"1972f2a5e1ccfee18fa19a923f7aea69f4d946208cca24a49335fea3ed276ac975b459a27ea9f10ca841126c1e5d13af8b9e080a17cc0607d94e90571e155100","ssdeep":"","tlshash":"9a61b5ad9e7a041e8cf320c2ec71ff6db055ca15d227c6a2c6f97a4612931578caa704","first_seen":"2023-04-07T10:57:18Z","last_seen":"2026-07-27T06:13:26.405819Z","times_seen":135,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.micstatic.com/common/fontastic/dist/assets/roboto/400-regular/Roboto-Regular_3ca9c03e.woff2","fqdn":"www.micstatic.com","domain":"micstatic.com","tld":"com"},"ip":{"addr":"104.18.18.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:14.440Z","timestamp":1781137934440,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.micstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"75:FB:E5:CC:B6:39:A2:23:18:94:59:8E:AC:6E:10:DA:F0:44:E1:D1","sha256":"01:FB:F1:A1:57:6A:E7:3C:DF:B8:48:FD:4F:56:13:83:20:29:D5:C9:DF:57:A2:1A:91:CE:12:35:9D:9B:A7:90"}}},"request":{"raw":"GET /common/fontastic/dist/assets/roboto/400-regular/Roboto-Regular_3ca9c03e.woff2 HTTP/1.1\r\nHost: www.micstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://i2mind.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 11 Jun 2026 00:32:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19832\r\nlast-modified: Mon, 15 Jan 2024 08:51:31 GMT\r\netag: \"65a4f213-4d78\"\r\naccept-ranges: bytes\r\norigin-agent-cluster: ?0\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=315360000\r\nset-cookie: __cf_bm=_IItN8Qb.H3DK82fl7GI.CRcmSjXJQ4hkPYSF0m6XlI-1781137934.4420786-1.0.1.1-T7eRotmfIV284rCVQVGVHfii8zxa46xoZgoYMkooR8iA4kP8seN43I2N2WW3nWfYUmHIx3xHI20uEuhoOnrhs42nCCJpNSG3adLu7GvGafi.G.fZ_iVLkEN72bmg6vcl; HttpOnly; SameSite=None; Secure; Path=/; Domain=micstatic.com; Expires=Thu, 11 Jun 2026 01:02:14 GMT\r\nage: 0\r\nexpires: Sun, 08 Jun 2036 00:32:14 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a09c847a48bab50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":19832,"size_decoded":20611,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19832, version 2.8978","md5":"ed2022705048507e5995ee72717e7fd4","sha1":"570864c3bccc3e0e203fdd67be3cf850387faefb","sha256":"e7f4f778ddb41b7be2d20810bb560acee79da55ed5d3eeac12f2bb8948f4453a","sha512":"ed1f0b98a8a9d510eee33f65aba70d59f616496f242924450a76f566b928addb86fa46f9e1056f47cbd1ae96c184cc025035e04dfc125834d7f7bf83a2fd2481","ssdeep":"384:V5mAS9ZvjYtiF8fD/Aa5zvD88AWSGlB+T22XVirh2x2/apKJR:qb+lfD/Aa5btAZGlBwdF42x2CpKJR","tlshash":"0992d1068bc674c7cab1469277a147f2d0a2fb38429ff3606a3a95b46764804d5bfcd4","first_seen":"2023-05-04T03:19:38Z","last_seen":"2026-08-08T02:01:06.462198Z","times_seen":519,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.micstatic.com/common/future/core/assets/fonts/Roboto-Regular_9ddf1d27.woff2","fqdn":"www.micstatic.com","domain":"micstatic.com","tld":"com"},"ip":{"addr":"104.18.18.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:14.474Z","timestamp":1781137934474,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.micstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"75:FB:E5:CC:B6:39:A2:23:18:94:59:8E:AC:6E:10:DA:F0:44:E1:D1","sha256":"01:FB:F1:A1:57:6A:E7:3C:DF:B8:48:FD:4F:56:13:83:20:29:D5:C9:DF:57:A2:1A:91:CE:12:35:9D:9B:A7:90"}}},"request":{"raw":"GET /common/future/core/assets/fonts/Roboto-Regular_9ddf1d27.woff2 HTTP/1.1\r\nHost: www.micstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://i2mind.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 11 Jun 2026 00:32:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19832\r\nlast-modified: Wed, 16 Jun 2021 11:14:12 GMT\r\netag: \"60c9dd04-4d78\"\r\naccept-ranges: bytes\r\norigin-agent-cluster: ?0\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=315360000\r\nset-cookie: __cf_bm=4Ly.Z_KvzJlVQcchcMm7tTpInI01BGWPdDEG6mblgbU-1781137934.475918-1.0.1.1-CMvd573.0SYYVM7A5.QJRzexmTphChEwAd3Uxp2.mYGEwMYRtI55LemoARDUYghnDrTlRltKcAcUG7Lh6LwLCQOG48C2q2Gqyw52hcylCdfpcUiETH6.RPJ.Qm4_N_3w; HttpOnly; SameSite=None; Secure; Path=/; Domain=micstatic.com; Expires=Thu, 11 Jun 2026 01:02:14 GMT\r\nage: 0\r\nexpires: Sun, 08 Jun 2036 00:32:14 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a09c847a78dab50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19832,"size_decoded":20610,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19832, version 2.8978","md5":"ed2022705048507e5995ee72717e7fd4","sha1":"570864c3bccc3e0e203fdd67be3cf850387faefb","sha256":"e7f4f778ddb41b7be2d20810bb560acee79da55ed5d3eeac12f2bb8948f4453a","sha512":"ed1f0b98a8a9d510eee33f65aba70d59f616496f242924450a76f566b928addb86fa46f9e1056f47cbd1ae96c184cc025035e04dfc125834d7f7bf83a2fd2481","ssdeep":"384:V5mAS9ZvjYtiF8fD/Aa5zvD88AWSGlB+T22XVirh2x2/apKJR:qb+lfD/Aa5btAZGlBwdF42x2CpKJR","tlshash":"0992d1068bc674c7cab1469277a147f2d0a2fb38429ff3606a3a95b46764804d5bfcd4","first_seen":"2023-05-04T03:19:38Z","last_seen":"2026-08-08T02:01:06.462198Z","times_seen":519,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.micstatic.com/common/future/core/assets/fonts/Roboto-Medium_cf57ae7a.woff2","fqdn":"www.micstatic.com","domain":"micstatic.com","tld":"com"},"ip":{"addr":"104.18.18.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:14.476Z","timestamp":1781137934476,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.micstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"75:FB:E5:CC:B6:39:A2:23:18:94:59:8E:AC:6E:10:DA:F0:44:E1:D1","sha256":"01:FB:F1:A1:57:6A:E7:3C:DF:B8:48:FD:4F:56:13:83:20:29:D5:C9:DF:57:A2:1A:91:CE:12:35:9D:9B:A7:90"}}},"request":{"raw":"GET /common/future/core/assets/fonts/Roboto-Medium_cf57ae7a.woff2 HTTP/1.1\r\nHost: www.micstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://i2mind.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 11 Jun 2026 00:32:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19496\r\nlast-modified: Wed, 16 Jun 2021 11:14:12 GMT\r\netag: \"60c9dd04-4c28\"\r\naccept-ranges: bytes\r\norigin-agent-cluster: ?0\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=315360000\r\nset-cookie: __cf_bm=1LKEJNRjJkKfmlCzG5mcdDql10TdbdsXsCzd3SGxBU4-1781137934.47809-1.0.1.1-W5KrzxW_hHeveA1w6NYSDsLkywSorckxHmYEKVXXVPBdJhUWJ.14L6VavQX7bqjafB5QIdfR262itb4Z.pGVMwhPIhhqlp97HPoNLzD7f.Y8AMMiVjmEEsJKiBkXyudk; HttpOnly; SameSite=None; Secure; Path=/; Domain=micstatic.com; Expires=Thu, 11 Jun 2026 01:02:14 GMT\r\nage: 0\r\nexpires: Sun, 08 Jun 2036 00:32:14 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a09c847a78dcb50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19496,"size_decoded":20273,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19496, version 1.0","md5":"2615547d207b037b3f6b559a928afc40","sha1":"218a0ec76d21728f13e51bcf22d744db04b3169d","sha256":"43dc1bd28d4c18a569a0005609c914ed7dbe8b51258b9c4576f610bae4a04205","sha512":"f4d807378efd5299eda4200fbba250e317ae88cc7c90357b5756fb5e4a171229a89499f81a49d9e4b986807a52c631041c56a3baad4a5ac8e15da1cb950bc50f","ssdeep":"384:62krMP+K1HxxkotscTyTtIFywKD4zUEDWqktjZm6F4Y4VMzaJSejJf8:kwnFxioMt+yhDcviQ6FDsMza8ejJ0","tlshash":"3792e099ac02ba92ec04fb3e017857a612d9b45be03d8b0b60de3702bbb11ca755dd05","first_seen":"2023-06-17T21:33:35Z","last_seen":"2026-08-08T02:01:06.455433Z","times_seen":160,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/js/polyfill-simplify_e22603b6.js","fqdn":"i2mind.com","domain":"i2mind.com","tld":"com"},"ip":{"addr":"82.96.137.78","port":80,"asn":199636,"as":"Free Pro SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:13.735Z","timestamp":1781137933735,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wordpress/wp-content/plugins/hello-dolly/bb/js/polyfill-simplify_e22603b6.js HTTP/1.1\r\nHost: i2mind.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 11 Jun 2026 00:32:13 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 24434\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nLast-Modified: Sat, 26 Apr 2025 03:10:46 GMT\r\nETag: \"e45f-633a5cc089980-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58463,"size_decoded":24762,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (39156), with LF, NEL line terminators","md5":"49ef970e480c99f043080b398efb0ca5","sha1":"b80046cd86811a8189554a973d4bd94a41e7d5b9","sha256":"5711a564a155b6b3a345259007224f3212392979f7aab17fd2144c2679b7b7e2","sha512":"eacd669dc8cafff337625e55b57d58bae56f3f128a068348f1ef991f242fdd843380e361c013b6b83f9d0fd2adaffa4d5febbe8acdadec2d3f15207a7e899886","ssdeep":"768:5Q1LVR+cjjMmxzR4czlevPv/TGX3GY2JbKe0VkKpf2PcNV/z4zZGevBuh:5kLXtAWzRVzQvY3Bvh1Dx","tlshash":"eb43d6887ac2f0b687e73930805f6106f27b9972994ec1d5d25bf4d13cb490a8627fad","first_seen":"2024-02-01T14:48:15Z","last_seen":"2026-08-08T02:01:06.458606Z","times_seen":85,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":50,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.micstatic.com/mic-janus/img/password-hide_e0bbced9.png","fqdn":"www.micstatic.com","domain":"micstatic.com","tld":"com"},"ip":{"addr":"104.18.18.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:14.165Z","timestamp":1781137934165,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.micstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"75:FB:E5:CC:B6:39:A2:23:18:94:59:8E:AC:6E:10:DA:F0:44:E1:D1","sha256":"01:FB:F1:A1:57:6A:E7:3C:DF:B8:48:FD:4F:56:13:83:20:29:D5:C9:DF:57:A2:1A:91:CE:12:35:9D:9B:A7:90"}}},"request":{"raw":"GET /mic-janus/img/password-hide_e0bbced9.png HTTP/1.1\r\nHost: www.micstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/\r\nCookie: __cf_bm=igznalcjAyfXUrTMWim7bOc71QRs_02ci4C.fwB9J5o-1781137934.008412-1.0.1.1-HXP8N.443qvqReLbrZMGPG8utP2LSPxbC4uz6n8lGdj4O7S2te8u6ByKn8CRgDY3Ww8x1gaGYtxsncia7h5v7Ss6TowaFpW0PTlkhuChFPlRGnAhlDNRC1QrN598Au84\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 11 Jun 2026 00:32:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1089\r\nlast-modified: Wed, 09 Oct 2024 01:43:58 GMT\r\netag: \"6705dfde-441\"\r\naccept-ranges: bytes\r\norigin-agent-cluster: ?0\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=315360000\r\nexpires: Sun, 08 Jun 2036 00:32:14 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a09c84788fe9b50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1089,"size_decoded":1534,"mime_type":"image/png","magic":"PNG image data, 28 x 25, 8-bit/color RGBA, non-interlaced","md5":"d49cbd3ddf26c2c0a0a4014c6723e48f","sha1":"dc0f089e59e19871265fea28ece98ee7e41c8928","sha256":"2cca45a55dbf339538fdc011e137c2f0d340e4e0e9c494a42430fed9ba32bba5","sha512":"ab6ae7fc7e33e0cd858b41c57ecf669556c495a4393395e4ffc430ae6a3e35da2a135515ed153c0eb7aa2d7bbd53a12b188f81304601152600eb9f14611e3b1c","ssdeep":"","tlshash":"3d11b9b3a06c1896d310757622a16155f4155ded9036653c994a8c96280c28ba69f94f","first_seen":"2024-11-15T03:31:54.45242Z","last_seen":"2026-08-08T02:01:06.452131Z","times_seen":81,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.micstatic.com/common/fontastic/dist/assets/roboto/500-medium/Roboto-Medium_2b1702b4.woff2","fqdn":"www.micstatic.com","domain":"micstatic.com","tld":"com"},"ip":{"addr":"104.18.18.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:14.443Z","timestamp":1781137934443,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.micstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"75:FB:E5:CC:B6:39:A2:23:18:94:59:8E:AC:6E:10:DA:F0:44:E1:D1","sha256":"01:FB:F1:A1:57:6A:E7:3C:DF:B8:48:FD:4F:56:13:83:20:29:D5:C9:DF:57:A2:1A:91:CE:12:35:9D:9B:A7:90"}}},"request":{"raw":"GET /common/fontastic/dist/assets/roboto/500-medium/Roboto-Medium_2b1702b4.woff2 HTTP/1.1\r\nHost: www.micstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://i2mind.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 11 Jun 2026 00:32:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19496\r\nlast-modified: Mon, 15 Jan 2024 08:51:31 GMT\r\netag: \"65a4f213-4c28\"\r\naccept-ranges: bytes\r\norigin-agent-cluster: ?0\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=315360000\r\nset-cookie: __cf_bm=Os4sIi6.K0zoMQu7kzaru4r7_AmigaT0D0sA4yQVDAs-1781137934.4453611-1.0.1.1-rJ3sPQIiiMQC0t1qpE7Le1GbDfyK2UzL2G3cJ2vwydYVALgtDxx7KuC6Jg1iBi_fBbDzWrvJHIjMuIgeCgRs590EUlrLjAYwZhYowIIru5n6QuBz8ivjc3ReLPW2EBpv; HttpOnly; SameSite=None; Secure; Path=/; Domain=micstatic.com; Expires=Thu, 11 Jun 2026 01:02:14 GMT\r\nexpires: Sun, 08 Jun 2036 00:32:14 GMT\r\nage: 649216\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a09c847a48bdb50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":19496,"size_decoded":20280,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19496, version 1.0","md5":"2615547d207b037b3f6b559a928afc40","sha1":"218a0ec76d21728f13e51bcf22d744db04b3169d","sha256":"43dc1bd28d4c18a569a0005609c914ed7dbe8b51258b9c4576f610bae4a04205","sha512":"f4d807378efd5299eda4200fbba250e317ae88cc7c90357b5756fb5e4a171229a89499f81a49d9e4b986807a52c631041c56a3baad4a5ac8e15da1cb950bc50f","ssdeep":"384:62krMP+K1HxxkotscTyTtIFywKD4zUEDWqktjZm6F4Y4VMzaJSejJf8:kwnFxioMt+yhDcviQ6FDsMza8ejJ0","tlshash":"3792e099ac02ba92ec04fb3e017857a612d9b45be03d8b0b60de3702bbb11ca755dd05","first_seen":"2023-06-17T21:33:35Z","last_seen":"2026-08-08T02:01:06.455433Z","times_seen":160,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.micstatic.com/common/future/core/assets/fonts/Roboto-Bold_1d9ce3d8.woff2","fqdn":"www.micstatic.com","domain":"micstatic.com","tld":"com"},"ip":{"addr":"104.18.18.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:14.473Z","timestamp":1781137934473,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.micstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"75:FB:E5:CC:B6:39:A2:23:18:94:59:8E:AC:6E:10:DA:F0:44:E1:D1","sha256":"01:FB:F1:A1:57:6A:E7:3C:DF:B8:48:FD:4F:56:13:83:20:29:D5:C9:DF:57:A2:1A:91:CE:12:35:9D:9B:A7:90"}}},"request":{"raw":"GET /common/future/core/assets/fonts/Roboto-Bold_1d9ce3d8.woff2 HTTP/1.1\r\nHost: www.micstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://i2mind.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 11 Jun 2026 00:32:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14552\r\nlast-modified: Wed, 16 Jun 2021 11:14:12 GMT\r\netag: \"60c9dd04-38d8\"\r\naccept-ranges: bytes\r\norigin-agent-cluster: ?0\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=315360000\r\nset-cookie: __cf_bm=qurNsv0vSK8WXhVl0k2LqlPBV.cnizwc2TcFRMfnF2k-1781137934.475237-1.0.1.1-s_oC9sdbP2AbySj5IOMmdRTw2mtjNK_pQk8PxrS95witu7P4cuAOzOhasIjfuhJIgEIpxDGnE9lc8Qa7Nq449sgE0nKY6Ug.zD24CobiYDLG0Iub404pwoV.43jpev.g; HttpOnly; SameSite=None; Secure; Path=/; Domain=micstatic.com; Expires=Thu, 11 Jun 2026 01:02:14 GMT\r\nage: 0\r\nexpires: Sun, 08 Jun 2036 00:32:14 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a09c847a78d7b50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":14552,"size_decoded":15330,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14552, version 2.0","md5":"0d7e71f2b5cc1ddab837f72e1fe52f3f","sha1":"c4344746896e452e5f4ef45781f622836910ae46","sha256":"413a32337b13f4db78efa8d6842a3769d28166c156d9d053bf70b472e4a1e41f","sha512":"b34543ec505823a28af551b0c9819a964a2b03a037e5769631bc6fb0a5c32629789dbdf281538792c550c6cf1583480e6b6ac89139c839e834e8a6405e3c1960","ssdeep":"384:fbB2cWy4rhVdGu84F3Rmyv4k1bM6pCIk2bC2Qqx6YSDrK:j0ZPd/8UR14k1bP8ZcC2QYS3K","tlshash":"cf62be6c3bfa3d30ceab3461228d845478d6194d6b7327a092f94e515ea86cce9c057a","first_seen":"2023-05-03T17:39:49Z","last_seen":"2026-08-08T02:01:06.444297Z","times_seen":1081,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","fqdn":"i2mind.com","domain":"i2mind.com","tld":"com"},"ip":{"addr":"82.96.137.78","port":80,"asn":199636,"as":"Free Pro SAS","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-11T00:32:13.547Z","timestamp":1781137933547,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wordpress/wp-content/plugins/hello-dolly/bb/index.html HTTP/1.1\r\nHost: i2mind.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 11 Jun 2026 00:32:13 GMT\r\nContent-Type: text/html\r\nContent-Length: 12895\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nLast-Modified: Sat, 26 Apr 2025 03:13:04 GMT\r\nETag: \"c5f1-633a5d4425000-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]}],"data":{"size":50673,"size_decoded":13210,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5494), with CRLF line terminators","md5":"fef12f4b5bfeb65ed0ed8dfe6ad0a0af","sha1":"9c3d592658cae43a4a07c43736238afe0a0e38d2","sha256":"4458000364d96ed4abfa6570e2a8797ca3aaf4f0831d84ba945781fcc60d4850","sha512":"b36f1420fb9f39b5edbfb34ad83296deffa87aa1cf916f85c1f1f40faa146e8c1f9b38554b077174447b4323256ee9fd48b8535d449ecd1f1c5c621ab71414d1","ssdeep":"768:dZC55fKXeIMP1R/zM+bBJiYmnrVk7ltED9iT2U+E8CIHjHadfar:do6nmltU2e","tlshash":"c533e82578c1015b22338795d3b6bb28fe94d103d6424b98fbdd1b878fbae12cd03699","first_seen":"2025-07-10T10:45:49.824828Z","last_seen":"2026-06-11T00:32:39.631921Z","times_seen":8,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":4,"connect":28,"send":0,"wait":38,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-11","alert":"Detects file containing Telegram Bot API","trigger":"i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"www.micstatic.com/common/fontastic/dist/assets/roboto/700-bold/Roboto-Bold_66f23800.woff2","fqdn":"www.micstatic.com","domain":"micstatic.com","tld":"com"},"ip":{"addr":"104.18.18.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:14.217Z","timestamp":1781137934217,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.micstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"75:FB:E5:CC:B6:39:A2:23:18:94:59:8E:AC:6E:10:DA:F0:44:E1:D1","sha256":"01:FB:F1:A1:57:6A:E7:3C:DF:B8:48:FD:4F:56:13:83:20:29:D5:C9:DF:57:A2:1A:91:CE:12:35:9D:9B:A7:90"}}},"request":{"raw":"GET /common/fontastic/dist/assets/roboto/700-bold/Roboto-Bold_66f23800.woff2 HTTP/1.1\r\nHost: www.micstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://i2mind.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 11 Jun 2026 00:32:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14552\r\nlast-modified: Mon, 15 Jan 2024 08:51:31 GMT\r\netag: \"65a4f213-38d8\"\r\naccept-ranges: bytes\r\norigin-agent-cluster: ?0\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=315360000\r\nset-cookie: __cf_bm=n6CeK_JH_eoYyihprefPfcTJU_9D29DlKTXgkbdM9hU-1781137934.219603-1.0.1.1-Nid8iF1L1Cu.9FMKkFSJRdGhpdbDZhQnqksKES5bOz9Rk.93OhY96TbEXXEBzpUwLn5wJCiYocsItcvxGmvZLQswTjBp26oezb3ixa8zrR7cyYiw_vWOrUIYMO9M8npx; HttpOnly; SameSite=None; Secure; Path=/; Domain=micstatic.com; Expires=Thu, 11 Jun 2026 01:02:14 GMT\r\nexpires: Sun, 08 Jun 2036 00:32:14 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: a09c8478d80fb50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14552,"size_decoded":15323,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14552, version 2.0","md5":"0d7e71f2b5cc1ddab837f72e1fe52f3f","sha1":"c4344746896e452e5f4ef45781f622836910ae46","sha256":"413a32337b13f4db78efa8d6842a3769d28166c156d9d053bf70b472e4a1e41f","sha512":"b34543ec505823a28af551b0c9819a964a2b03a037e5769631bc6fb0a5c32629789dbdf281538792c550c6cf1583480e6b6ac89139c839e834e8a6405e3c1960","ssdeep":"384:fbB2cWy4rhVdGu84F3Rmyv4k1bM6pCIk2bC2Qqx6YSDrK:j0ZPd/8UR14k1bP8ZcC2QYS3K","tlshash":"cf62be6c3bfa3d30ceab3461228d845478d6194d6b7327a092f94e515ea86cce9c057a","first_seen":"2023-05-03T17:39:49Z","last_seen":"2026-08-08T02:01:06.444297Z","times_seen":1081,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.micstatic.com/common/fontastic/dist/assets/roboto/500-medium/Roboto-Medium_2b1702b4.woff2","fqdn":"www.micstatic.com","domain":"micstatic.com","tld":"com"},"ip":{"addr":"104.18.18.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:14.221Z","timestamp":1781137934221,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.micstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"75:FB:E5:CC:B6:39:A2:23:18:94:59:8E:AC:6E:10:DA:F0:44:E1:D1","sha256":"01:FB:F1:A1:57:6A:E7:3C:DF:B8:48:FD:4F:56:13:83:20:29:D5:C9:DF:57:A2:1A:91:CE:12:35:9D:9B:A7:90"}}},"request":{"raw":"GET /common/fontastic/dist/assets/roboto/500-medium/Roboto-Medium_2b1702b4.woff2 HTTP/1.1\r\nHost: www.micstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://i2mind.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 11 Jun 2026 00:32:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19496\r\nlast-modified: Mon, 15 Jan 2024 08:51:31 GMT\r\netag: \"65a4f213-4c28\"\r\naccept-ranges: bytes\r\norigin-agent-cluster: ?0\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=315360000\r\nset-cookie: __cf_bm=8g4u4LpLFixfQJrdAglqPIUe6eiCDs7KhgwFknY9zFs-1781137934.2230518-1.0.1.1-9zhi2EgWCNhWC.nowpIYEaxxuq35grID.cLoGyeQwIeiDaru.87l9nUADL.A39rDYoS_iqXjQKfcnv8IeOCqB9IJvD7EP31dEP_BEX7A17W39tP5BF2yCt892eKvFYh1; HttpOnly; SameSite=None; Secure; Path=/; Domain=micstatic.com; Expires=Thu, 11 Jun 2026 01:02:14 GMT\r\nexpires: Sun, 08 Jun 2036 00:32:14 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a09c8478e812b50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":19496,"size_decoded":20267,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19496, version 1.0","md5":"2615547d207b037b3f6b559a928afc40","sha1":"218a0ec76d21728f13e51bcf22d744db04b3169d","sha256":"43dc1bd28d4c18a569a0005609c914ed7dbe8b51258b9c4576f610bae4a04205","sha512":"f4d807378efd5299eda4200fbba250e317ae88cc7c90357b5756fb5e4a171229a89499f81a49d9e4b986807a52c631041c56a3baad4a5ac8e15da1cb950bc50f","ssdeep":"384:62krMP+K1HxxkotscTyTtIFywKD4zUEDWqktjZm6F4Y4VMzaJSejJf8:kwnFxioMt+yhDcviQ6FDsMza8ejJ0","tlshash":"3792e099ac02ba92ec04fb3e017857a612d9b45be03d8b0b60de3702bbb11ca755dd05","first_seen":"2023-06-17T21:33:35Z","last_seen":"2026-08-08T02:01:06.455433Z","times_seen":160,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.micstatic.com/common/future/core/assets/fonts/Roboto-Regular_9ddf1d27.woff2","fqdn":"www.micstatic.com","domain":"micstatic.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:14.328Z","timestamp":1781137934328,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.micstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"75:FB:E5:CC:B6:39:A2:23:18:94:59:8E:AC:6E:10:DA:F0:44:E1:D1","sha256":"01:FB:F1:A1:57:6A:E7:3C:DF:B8:48:FD:4F:56:13:83:20:29:D5:C9:DF:57:A2:1A:91:CE:12:35:9D:9B:A7:90"}}},"request":{"raw":"GET /common/future/core/assets/fonts/Roboto-Regular_9ddf1d27.woff2 HTTP/1.1\r\nHost: www.micstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://i2mind.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T07:24:29.939425Z","times_seen":17775129,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.micstatic.com/mic-janus/img/help_68e6c3c5.png","fqdn":"www.micstatic.com","domain":"micstatic.com","tld":"com"},"ip":{"addr":"104.18.18.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:14.171Z","timestamp":1781137934171,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.micstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"75:FB:E5:CC:B6:39:A2:23:18:94:59:8E:AC:6E:10:DA:F0:44:E1:D1","sha256":"01:FB:F1:A1:57:6A:E7:3C:DF:B8:48:FD:4F:56:13:83:20:29:D5:C9:DF:57:A2:1A:91:CE:12:35:9D:9B:A7:90"}}},"request":{"raw":"GET /mic-janus/img/help_68e6c3c5.png HTTP/1.1\r\nHost: www.micstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/\r\nCookie: __cf_bm=igznalcjAyfXUrTMWim7bOc71QRs_02ci4C.fwB9J5o-1781137934.008412-1.0.1.1-HXP8N.443qvqReLbrZMGPG8utP2LSPxbC4uz6n8lGdj4O7S2te8u6ByKn8CRgDY3Ww8x1gaGYtxsncia7h5v7Ss6TowaFpW0PTlkhuChFPlRGnAhlDNRC1QrN598Au84\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 11 Jun 2026 00:32:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1124\r\nlast-modified: Thu, 24 Oct 2024 12:12:35 GMT\r\netag: \"671a39b3-464\"\r\naccept-ranges: bytes\r\norigin-agent-cluster: ?0\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\nexpires: Sun, 08 Jun 2036 00:32:14 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a09c84789fefb50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1124,"size_decoded":1569,"mime_type":"image/png","magic":"PNG image data, 35 x 40, 8-bit/color RGBA, non-interlaced","md5":"79fb571cc09c9ebe6de90243c1284ca7","sha1":"b5c013ed2ad56d6caca43beba23d40d0a6b65720","sha256":"d76516db59eeab8c37df900ad758119c34516f78940ae25b6aeba0c46c712a2f","sha512":"98eff54b339f71033b96f39575412b826250f02ec2c8ee0c50e05fa63e7dc3d85736501de87447f9837375584abd4e9eccad6790e4c09a58612cbcfbd209abb8","ssdeep":"","tlshash":"7a21b92f77c79e59eb5f562a341780025c62394c0598a3e4cdb59c03545a09b5be336c","first_seen":"2024-11-15T03:31:54.426266Z","last_seen":"2026-08-08T02:01:06.453376Z","times_seen":76,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.micstatic.com/common/fontastic/dist/assets/icon/micon_a1e45220.woff2","fqdn":"www.micstatic.com","domain":"micstatic.com","tld":"com"},"ip":{"addr":"104.18.18.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:14.219Z","timestamp":1781137934219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.micstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"75:FB:E5:CC:B6:39:A2:23:18:94:59:8E:AC:6E:10:DA:F0:44:E1:D1","sha256":"01:FB:F1:A1:57:6A:E7:3C:DF:B8:48:FD:4F:56:13:83:20:29:D5:C9:DF:57:A2:1A:91:CE:12:35:9D:9B:A7:90"}}},"request":{"raw":"GET /common/fontastic/dist/assets/icon/micon_a1e45220.woff2 HTTP/1.1\r\nHost: www.micstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://i2mind.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 11 Jun 2026 00:32:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26968\r\nlast-modified: Tue, 16 Jan 2024 07:26:57 GMT\r\netag: \"65a62fc1-6958\"\r\naccept-ranges: bytes\r\norigin-agent-cluster: ?0\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=315360000\r\nset-cookie: __cf_bm=O_62SQQ9vfs_FVqQ1YenCAmP12IO0n_oolArXfvUVzs-1781137934.2209456-1.0.1.1-2VTBQvUgN2.S7HOMbtQjkTGr1Rn._4auDGCdT.YYmrQQ5cMdlnP4kQXIjNAPvR2.WYmattme4cyBJSJYSxTRAMg5mTkmkEggOF62qNnuVL8uarYRRcH9JhASkk6QxVEQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=micstatic.com; Expires=Thu, 11 Jun 2026 01:02:14 GMT\r\nexpires: Sun, 08 Jun 2036 00:32:14 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: a09c8478e810b50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":26968,"size_decoded":27740,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26968, version 1.0","md5":"a9893cbace7dd5b4b3935522f82373bf","sha1":"33568ad29631e90681d2305f2c2358a4f2a17937","sha256":"6729d8755d8f5cc2dda98c81b9f9d567027af5f804b7f7a3d060e1c0e91f48e5","sha512":"d61e7f953afd486d8bd10cf0a4412509447d37483d9206e2e7e2e4ede73124110f85ae0b2d9f2c493af2b7107122f8b1878f1274f3f78648482b6dcd86068203","ssdeep":"768:xAH36+5lNdgjS91t+ek2BCVQJdnrplMbvw/4:xAFHNdiS9w28VQJdnrpmbvwg","tlshash":"a7c2d1edb6042f14f0d6d6f917fcc858b91403ad7644a4a0e41f274a376489f9c366ea","first_seen":"2024-02-01T14:48:17Z","last_seen":"2026-08-08T02:01:06.442944Z","times_seen":210,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.micstatic.com/common/future/core/assets/fonts/Roboto-Bold_1d9ce3d8.woff2","fqdn":"www.micstatic.com","domain":"micstatic.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:14.368Z","timestamp":1781137934368,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.micstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"75:FB:E5:CC:B6:39:A2:23:18:94:59:8E:AC:6E:10:DA:F0:44:E1:D1","sha256":"01:FB:F1:A1:57:6A:E7:3C:DF:B8:48:FD:4F:56:13:83:20:29:D5:C9:DF:57:A2:1A:91:CE:12:35:9D:9B:A7:90"}}},"request":{"raw":"GET /common/future/core/assets/fonts/Roboto-Bold_1d9ce3d8.woff2 HTTP/1.1\r\nHost: www.micstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://i2mind.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T07:24:29.939425Z","times_seen":17775129,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.micstatic.com/common/fontastic/dist/assets/roboto/700-bold/Roboto-Bold_66f23800.woff2","fqdn":"www.micstatic.com","domain":"micstatic.com","tld":"com"},"ip":{"addr":"104.18.18.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:14.441Z","timestamp":1781137934441,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.micstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"75:FB:E5:CC:B6:39:A2:23:18:94:59:8E:AC:6E:10:DA:F0:44:E1:D1","sha256":"01:FB:F1:A1:57:6A:E7:3C:DF:B8:48:FD:4F:56:13:83:20:29:D5:C9:DF:57:A2:1A:91:CE:12:35:9D:9B:A7:90"}}},"request":{"raw":"GET /common/fontastic/dist/assets/roboto/700-bold/Roboto-Bold_66f23800.woff2 HTTP/1.1\r\nHost: www.micstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://i2mind.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 11 Jun 2026 00:32:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14552\r\nlast-modified: Mon, 15 Jan 2024 08:51:31 GMT\r\netag: \"65a4f213-38d8\"\r\naccept-ranges: bytes\r\norigin-agent-cluster: ?0\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=315360000\r\nset-cookie: __cf_bm=6mneMu5hhYQhuiWkvT3jP_vGbytD9_psBAxRhDLm.Qk-1781137934.443148-1.0.1.1-KdTrm5Ch3tKFR9adM0ivuoXRwv5cuAzERn.x4jOyYhCdnfisIg2zAPG6izZludqj6UHQMME5bRqD0R1U0nCV2LA8DDJUmY6TZPaMqV1hcaXtU7wfAqtLxuZtdVismWos; HttpOnly; SameSite=None; Secure; Path=/; Domain=micstatic.com; Expires=Thu, 11 Jun 2026 01:02:14 GMT\r\nage: 0\r\nexpires: Sun, 08 Jun 2036 00:32:14 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a09c847a48bbb50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14552,"size_decoded":15330,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14552, version 2.0","md5":"0d7e71f2b5cc1ddab837f72e1fe52f3f","sha1":"c4344746896e452e5f4ef45781f622836910ae46","sha256":"413a32337b13f4db78efa8d6842a3769d28166c156d9d053bf70b472e4a1e41f","sha512":"b34543ec505823a28af551b0c9819a964a2b03a037e5769631bc6fb0a5c32629789dbdf281538792c550c6cf1583480e6b6ac89139c839e834e8a6405e3c1960","ssdeep":"384:fbB2cWy4rhVdGu84F3Rmyv4k1bM6pCIk2bC2Qqx6YSDrK:j0ZPd/8UR14k1bP8ZcC2QYS3K","tlshash":"cf62be6c3bfa3d30ceab3461228d845478d6194d6b7327a092f94e515ea86cce9c057a","first_seen":"2023-05-03T17:39:49Z","last_seen":"2026-08-08T02:01:06.444297Z","times_seen":1081,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/css/future-pure_199380fc.css","fqdn":"i2mind.com","domain":"i2mind.com","tld":"com"},"ip":{"addr":"82.96.137.78","port":80,"asn":199636,"as":"Free Pro SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:13.731Z","timestamp":1781137933731,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wordpress/wp-content/plugins/hello-dolly/bb/css/future-pure_199380fc.css HTTP/1.1\r\nHost: i2mind.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 11 Jun 2026 00:32:13 GMT\r\nContent-Type: text/css\r\nContent-Length: 22547\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nLast-Modified: Sat, 26 Apr 2025 03:10:46 GMT\r\nETag: \"1fbdf-633a5cc089980-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":130015,"size_decoded":22862,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a1bd3daa7ea62e1efaf875fe0a336938","sha1":"75b353a5e3f281fe72139375286b461bd4fdef94","sha256":"9da6dba2fe589302fcd61c271a0232c06a7d8e3dc94328fe2d676d87a01fe52a","sha512":"508d02bf4851e3e19a04961568ce048053f425bc2fe169817bfa58bad07aba5aa538b71876ec1b0824dd624671683821cd8b1fba49afe3761e4ebcabb6994f68","ssdeep":"768:zSpb3imnaqMJ7d8wN8ME58ZJszyDaB7Q9w6ZszJGT+JlLLWNvjEAr/AzoULMo3ZE:upbSmnaVJ58Zq6X+UKFzHLDTxEx2","tlshash":"a5d375104b243096aa23db1971e0f954a025f712fdb39e5bf3693e14c7f2d46121feaa","first_seen":"2025-01-04T11:42:35.364231Z","last_seen":"2026-08-08T02:01:06.457192Z","times_seen":45,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html#/captcha.micstatic.com/css/fc-verify-3.1.1-pc.css","fqdn":"i2mind.com","domain":"i2mind.com","tld":"com"},"ip":{"addr":"82.96.137.78","port":80,"asn":199636,"as":"Free Pro SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:13.737Z","timestamp":1781137933737,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wordpress/wp-content/plugins/hello-dolly/bb/index.html HTTP/1.1\r\nHost: i2mind.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 11 Jun 2026 00:32:13 GMT\r\nContent-Type: text/html\r\nContent-Length: 12895\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nLast-Modified: Sat, 26 Apr 2025 03:13:04 GMT\r\nETag: \"c5f1-633a5d4425000-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]}],"data":{"size":50673,"size_decoded":13210,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5494), with CRLF line terminators","md5":"fef12f4b5bfeb65ed0ed8dfe6ad0a0af","sha1":"9c3d592658cae43a4a07c43736238afe0a0e38d2","sha256":"4458000364d96ed4abfa6570e2a8797ca3aaf4f0831d84ba945781fcc60d4850","sha512":"b36f1420fb9f39b5edbfb34ad83296deffa87aa1cf916f85c1f1f40faa146e8c1f9b38554b077174447b4323256ee9fd48b8535d449ecd1f1c5c621ab71414d1","ssdeep":"768:dZC55fKXeIMP1R/zM+bBJiYmnrVk7ltED9iT2U+E8CIHjHadfar:do6nmltU2e","tlshash":"c533e82578c1015b22338795d3b6bb28fe94d103d6424b98fbdd1b878fbae12cd03699","first_seen":"2025-07-10T10:45:49.824828Z","last_seen":"2026-06-11T00:32:39.631921Z","times_seen":8,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":37,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-11","alert":"Detects file containing Telegram Bot API","trigger":"i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html#/captcha.micstatic.com/css/fc-verify-3.1.1-pc.css","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"i2mind.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"captcha.micstatic.com/js/crypto-js.min.js","fqdn":"captcha.micstatic.com","domain":"micstatic.com","tld":"com"},"ip":{"addr":"104.18.18.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:13.970Z","timestamp":1781137933970,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.micstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"75:FB:E5:CC:B6:39:A2:23:18:94:59:8E:AC:6E:10:DA:F0:44:E1:D1","sha256":"01:FB:F1:A1:57:6A:E7:3C:DF:B8:48:FD:4F:56:13:83:20:29:D5:C9:DF:57:A2:1A:91:CE:12:35:9D:9B:A7:90"}}},"request":{"raw":"GET /js/crypto-js.min.js HTTP/1.1\r\nHost: captcha.micstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 11 Jun 2026 00:32:14 GMT\r\ncontent-type: application/javascript;charset=UTF-8\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST, GET,PUT, OPTIONS, DELETE\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-type,captchaid\r\naccess-control-allow-private-network: true\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nlast-modified: Tue, 30 Dec 2025 06:21:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\norigin-agent-cluster: ?0\r\nset-cookie: __cf_bm=4RHoSq5HR9ov6n4pGtlGnGY1zuJiO7LNLFoRiFzLe58-1781137933.9942434-1.0.1.1-.hDMskp81gI.WmDABGXMcx0Sa7aqB767_WsIZPxRwhqSulXH0ThD.2B2348qltMhg04lTVXsQFyK1eNuC9pWyjT6tc_8prGoyQvGP5Q0DeEguQxjc.7uxVGV.naBNvuf; HttpOnly; SameSite=None; Secure; Path=/; Domain=micstatic.com; Expires=Thu, 11 Jun 2026 01:02:14 GMT\r\nage: 2320887\r\nexpires: Thu, 11 Jun 2026 04:32:14 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a09c84777f63b50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52168,"size_decoded":15310,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (52168), with no line terminators","md5":"c9488386137fe54503ed48cd2b448e58","sha1":"548f550283bd842e4211a8a3267f32cdd2bcfbfc","sha256":"7240cd5475358c5b144f2ba6bce789db7a5c9dbde649469cf292d0e025dd9fa8","sha512":"22a8bc0ff0607a01519c9a207914127e7ef9d4667d2dc3c1a81e091a5642d355c79bb843e74ce286d9d4bb6a6081fe8bbfab13be4cfcbab051cc459dbe8ba6b8","ssdeep":"768:0VIIeJPdERyk2PEFs+qcmCJIaoUWw3VQmmTE+VMyNlwWGg+Jn+xS2D0Onh5shWm5:9mskHDC6yiJn+xdsZ4g/ZVua/V/DyWp","tlshash":"963386501bd0688813ab5ffe373fb0e6e86d15573d558847e321fca0a59a60ae7d6c30","first_seen":"2024-08-20T12:27:51.742995Z","last_seen":"2026-07-21T03:20:58.69763Z","times_seen":24,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":11,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.micstatic.com/mic-janus/img/icon/warn.png","fqdn":"www.micstatic.com","domain":"micstatic.com","tld":"com"},"ip":{"addr":"104.18.18.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://i2mind.com/wordpress/wp-content/plugins/hello-dolly/bb/index.html","date":"2026-06-11T00:32:13.988Z","timestamp":1781137933988,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.micstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"75:FB:E5:CC:B6:39:A2:23:18:94:59:8E:AC:6E:10:DA:F0:44:E1:D1","sha256":"01:FB:F1:A1:57:6A:E7:3C:DF:B8:48:FD:4F:56:13:83:20:29:D5:C9:DF:57:A2:1A:91:CE:12:35:9D:9B:A7:90"}}},"request":{"raw":"GET /mic-janus/img/icon/warn.png HTTP/1.1\r\nHost: www.micstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://i2mind.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 11 Jun 2026 00:32:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 507\r\nlast-modified: Thu, 24 Oct 2024 12:12:35 GMT\r\netag: \"671a39b3-1fb\"\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\norigin-agent-cluster: ?0\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=igznalcjAyfXUrTMWim7bOc71QRs_02ci4C.fwB9J5o-1781137934.008412-1.0.1.1-HXP8N.443qvqReLbrZMGPG8utP2LSPxbC4uz6n8lGdj4O7S2te8u6ByKn8CRgDY3Ww8x1gaGYtxsncia7h5v7Ss6TowaFpW0PTlkhuChFPlRGnAhlDNRC1QrN598Au84; HttpOnly; SameSite=None; Secure; Path=/; Domain=micstatic.com; Expires=Thu, 11 Jun 2026 01:02:14 GMT\r\nexpires: Sun, 08 Jun 2036 00:32:14 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a09c84778f69b50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":507,"size_decoded":1273,"mime_type":"image/png","magic":"PNG image data, 23 x 23, 8-bit/color RGBA, non-interlaced","md5":"1ce07e0444401ea24b110f52e14a1faa","sha1":"e494b3bac2c23670bb6236bbf43be8012b7b34fb","sha256":"d18fecec6da2e5d17934be47227c3b9128fed8fa76b8b1fb825b4c6e275d81ad","sha512":"6528de099ff2b6649bb073649a0e44420e4a757fb815123cab1c4de546164b0285d5e0e24538b070dcfd38061f2784f3a26102aab14161615527fffdb8cab535","ssdeep":"","tlshash":"d3f005d226506819db596c7347721302782154502181e05dee1a7cd76d074c6d45df5d","first_seen":"2024-11-15T03:31:54.417709Z","last_seen":"2026-06-11T00:32:39.636168Z","times_seen":15,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":17,"connect":1,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}