{"report_id":"1709ff3f-e512-4d47-897d-dbf671e59202","version":6,"status":"done","tags":[],"date":"2026-02-14T04:05:53Z","url":{"schema":"https","addr":"havocworlds.xyz/","fqdn":"havocworlds.xyz","domain":"havocworlds.xyz","tld":"xyz"},"ip":{"addr":"104.21.94.62","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"havocworlds.xyz/","fqdn":"havocworlds.xyz","domain":"havocworlds.xyz","tld":"xyz"},"title":"Havoc Worlds NFT Giveaway","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"f95036c5c31050843c48e4cadbb3230a","sha1":"36f8d7787b09614c0ecc1f94d5e4d701dc6e4722","sha256":"0e67d276f61d6d415484f66924b1f754ec59f8cf16f9bbd8a78f319a5d366ab1","sha512":"01642779e0dad8cdde619bdcbcb0d52f2a12a6a339eb6560e00c749002fb23036720a677bb241806e067a60fe3bdaa98f62c6a5ca2363fb2b8165c9e51bc69e9","ssdeep":"","tlshash":"32e026e95e76c83478b4138620f5e69c5a2061a0bb11e74842d8dc7b9e20fe38c92a58","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"havocworlds.xyz/","fqdn":"havocworlds.xyz","domain":"havocworlds.xyz","tld":"xyz"},"ip":{"addr":"104.21.94.62","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T04:05:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"havocworlds.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"havocworlds.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"havocworlds.xyz","ip":{"addr":"104.21.94.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-22","domain_rank":0,"first_seen":"2026-02-13T02:48:57.950481Z","last_seen":"2026-02-13T02:48:57.950481Z","alert_count":16,"request_count":8,"received_data":250806,"sent_data":3703,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js:3.3.4","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"havocworlds.xyz/","fqdn":"havocworlds.xyz","domain":"havocworlds.xyz","tld":"xyz"},"ip":{"addr":"104.21.94.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f0375fecb9aed3bd925ad7c389568cb2","sha1":"ae08c68ccd6a1986015c68b4860e39f1611dfc3c","sha256":"6b44f07db25c8662e2efce325fc5a5b7a2649528b99032a9118dce9aaea2dddf","sha512":"081b7018828278415587b8889fec9b1732949d4494ae5c625933b058e5b3169220d7560ca8862bcae1686cff22431e58673fa35266ff43409bc3d44440675086","ssdeep":"","tlshash":"8281943497fa09bace2b43f3474bd2103b20b047318ac4663b1ccba41fc0d61a9ba9d4","size":3858,"data":"","first_seen":"2025-10-20T19:17:09.877094Z","last_seen":"2026-04-27T03:24:45.689878Z","times_seen":356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb20f0f6c441090a19a5cee121bc592","sha1":"86ee1df8c2d6825c1fa4f9c7bd233bec80056613","sha256":"5953fda61d8c401a60726a89836c73b8ece9f0a6e076b6c018f595049ea541d0","sha512":"ea3b2e0a78c4e624f4c68daf7bf31575d72814df0d697122227e7f61456974f070c26e3848caea83972858f16bb2528900d137f33dee4e9c1c94c4b0fa79d94c","ssdeep":"","tlshash":"38d023591a768c3075a9024660b5dbe8a56131a0bf11f34481d8cc6b7e31dd358b566c","size":217,"data":"","first_seen":"2026-02-14T04:05:54.774412Z","last_seen":"2026-02-14T04:05:54.774412Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"havocworlds.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"havocworlds.xyz","domain":"havocworlds.xyz","tld":"xyz"},"ip":{"addr":"104.21.94.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1aabeacbd616ef90c09e8a40ce3d131b","sha1":"07c9846220c869e44fd5c475e74f03d9c4bdc074","sha256":"5731a143af5a55abcb4ebb41a3254da0ba413c40a68decd57e9e0b047ab9c62f","sha512":"871d259d6ea95f8d7d0a7b0bdd9dc4b5b39623f8c611e44e63c0dd6bc52db724b19893c6259c07c4dba777ddd5bbe62eb4e590fcd034de478d9b8221481d0cdc","ssdeep":"384:4gEp3b19E6EAY30zgt7ImyUIPIYhXNf21uMc3T7RcPjyqY9cPuSF:Cgt8H1vpcPes","tlshash":"26a2b8ad7ceb781742523870036f646b272f6ec021ce683e8e1785d47971348a97ed6d","size":23063,"data":"","first_seen":"2026-02-14T03:23:43.549031Z","last_seen":"2026-02-14T04:12:18.001196Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"havocworlds.xyz/","fqdn":"havocworlds.xyz","domain":"havocworlds.xyz","tld":"xyz"},"ip":{"addr":"104.21.94.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f39751808e44d3de1e63eac53c30707","sha1":"e4c0dc11652bc42658503db4fe8e4343016b7b85","sha256":"dc1df2ec732141a8e5a1bf11fc6034365b07110ee6c30e61a08acbbc5cfc5737","sha512":"608e301b1d4c14715224ee09673dd4beea31ed0329437e4f800e5c55c58656027fc52761bdedbeb96366befb784c1b62852cfe06ba77a65a56a9374e82362e3b","ssdeep":"","tlshash":"0ee0269ba883145111b320789edf82087a3264523048e740a86cc2b82f3091f81515cc","size":310,"data":"","first_seen":"2025-10-20T19:17:09.879087Z","last_seen":"2026-04-27T03:24:45.690523Z","times_seen":357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"havocworlds.xyz/","fqdn":"havocworlds.xyz","domain":"havocworlds.xyz","tld":"xyz"},"ip":{"addr":"104.21.94.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4b01690502fa483796680acc63be3885","sha1":"4325acee57ec50c61b526d2cc0e96e24d4280302","sha256":"5adaa9dc54717b91820ba8008b670c94b2b98d91678cd3399de94e3076a23b09","sha512":"afc694a1e8e08ad864f0e92103f81c814a3522ec51e6f2797934dae741257bc2f14c13c2709915d523eec2d71a42d41757f25958b593181cb63429bfa2bbfb16","ssdeep":"","tlshash":"171100793b2a1534d9d5818b317eeba83d3260717e02a184c36ccc295d28e8314efdbe","size":902,"data":"","first_seen":"2026-02-14T04:05:54.777408Z","last_seen":"2026-02-14T04:05:54.777408Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"havocworlds.xyz/","fqdn":"havocworlds.xyz","domain":"havocworlds.xyz","tld":"xyz"},"ip":{"addr":"104.21.94.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T04:05:31.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"havocworlds.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 14:32:23 GMT","end":"Wed, 22 Apr 2026 15:30:10 GMT"},"fingerprint":{"sha1":"0C:9A:99:63:69:24:63:E2:1F:51:BA:7D:A0:AC:02:95:DF:87:0C:FE","sha256":"22:46:7A:DD:66:7D:5C:D3:9C:82:0F:D7:08:D0:91:E5:98:2A:9D:97:34:90:AC:B7:45:16:89:0A:99:87:65:49"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: havocworlds.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 04:05:31 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 22 Jan 2026 15:06:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2VWGKsIP2sH9QMA2eryAH0Q0t%2BIIOyWxNrfzlG5VIsjU%2FuPHHfklB70EbRz7ITO4s2ZDPfE%2BEVUgJoFX%2BqN9LegE25mr2jonHPfhnBap8g%3D%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cd9b00a1a888be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js:3.3.4","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":19754,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (926)","md5":"afbe0eca5f5ed3444bc7ea047fe26671","sha1":"893b9695018ab9abb6f8eb8cd38b4059aaafe7fd","sha256":"3760d2de73a1b28c6de81947705ee880963779f1129b67244c82ce15c60dd1c4","sha512":"4970ca6a7f2b9c020fd5317fd6a5ef407493f2ad7f5ec709e4a01893383d5dbc67b40a9efe4048335ff6d1f6813d5f2921d6002b5166b22f14da2de0528695e6","ssdeep":"384:D6t4Mk15Z175pGLar6F+r6cbtU8VgX5CqYA5nx/k:YA15r9IxJEA5x/k","tlshash":"5992f83566e1113ab427c1d673e7a35e3660f007d20bc99877dd82a84fc2ed36a766c8","first_seen":"2026-02-14T04:05:54.759657Z","last_seen":"2026-02-14T04:05:54.759657Z","times_seen":1,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":89,"dns":72,"connect":3,"send":0,"wait":105,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"havocworlds.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"havocworlds.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"havocworlds.xyz/vue-3.3.4.min.js","fqdn":"havocworlds.xyz","domain":"havocworlds.xyz","tld":"xyz"},"ip":{"addr":"104.21.94.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://havocworlds.xyz/","date":"2026-02-14T04:05:32.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"havocworlds.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 14:32:23 GMT","end":"Wed, 22 Apr 2026 15:30:10 GMT"},"fingerprint":{"sha1":"0C:9A:99:63:69:24:63:E2:1F:51:BA:7D:A0:AC:02:95:DF:87:0C:FE","sha256":"22:46:7A:DD:66:7D:5C:D3:9C:82:0F:D7:08:D0:91:E5:98:2A:9D:97:34:90:AC:B7:45:16:89:0A:99:87:65:49"}}},"request":{"raw":"GET /vue-3.3.4.min.js HTTP/1.1\r\nHost: havocworlds.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://havocworlds.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncontent-type: text/html\r\nlast-modified: Tue, 22 Apr 2025 07:41:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JlrOPvRdhNCscRn%2F1pcujwX%2FjB19R9sbuvsbd2uvUg2HmtYYjnLQlbGx0RpAY%2FVvi4PZhiu3MLJTRR8icf4mWy523MaggDgSIemyJ%2BbwOQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ndate: Sat, 14 Feb 2026 04:05:32 GMT\r\nserver: cloudflare\r\ncontent-security-policy: upgrade-insecure-requests\r\nplatform: hostinger\r\npanel: hpanel\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncf-ray: 9cd9b00bbbc28be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":4511,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (371)","md5":"b16e9097fc7d3af8ebfcfce7aba0a42d","sha1":"2af3c8408b8445fe81d9a7c8d7cc8e8a05bf80f5","sha256":"e7db95c97a5d45787cc3e40cbcb93b748fefc65bc14e162c746e37f979861729","sha512":"53a7a2c276fbc5159231c162eb863504448515f1a078832b81f1bffeedb1c82932810b66748fd4111d1b8fb866622a5cc63e79e497227b611c90886ba45d3f3b","ssdeep":"96:tr+ulojsBwJG8YqVcqHL/GSrrLc1VhrJuzeK:tyoasBwJG8nVjaSeVhrJgeK","tlshash":"0891f88f25f381452603c99037f9b61499554007f685eca8bdee9228cfc4b8a41e3bdc","first_seen":"2025-04-22T08:45:29.599713Z","last_seen":"2026-07-28T15:05:47.000832Z","times_seen":37854,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"havocworlds.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"havocworlds.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"havocworlds.xyz/logo.png","fqdn":"havocworlds.xyz","domain":"havocworlds.xyz","tld":"xyz"},"ip":{"addr":"104.21.94.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://havocworlds.xyz/","date":"2026-02-14T04:05:32.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"havocworlds.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 14:32:23 GMT","end":"Wed, 22 Apr 2026 15:30:10 GMT"},"fingerprint":{"sha1":"0C:9A:99:63:69:24:63:E2:1F:51:BA:7D:A0:AC:02:95:DF:87:0C:FE","sha256":"22:46:7A:DD:66:7D:5C:D3:9C:82:0F:D7:08:D0:91:E5:98:2A:9D:97:34:90:AC:B7:45:16:89:0A:99:87:65:49"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: havocworlds.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://havocworlds.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 20 Feb 2026 02:48:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 15:06:34 GMT\r\netag: \"3581-69723cfa-ae194e75a2dfecc2;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 13697\r\ndate: Sat, 14 Feb 2026 04:05:32 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 91022\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tvjQCVKT53vBSvhvSS7S90343bvAZPygN9onLQBkrxGrlTKOEBw3tYnOXvPcjL%2FujrOrNP11HdhQz3lbIUojfhFiuhC%2BDEktFFTJ1tdlgg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9b00bbbc38be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":13697,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"4ffd04eb30f6fece7ebe37b8cb362a79","sha1":"1852cbd976605df1e6033b1a596c7c0bac831106","sha256":"18d094c7a558c4936e01dd476917bae3b9c43f21bb3e148aa38bd2d489eef5d7","sha512":"81374fe6c2cac267ff62ac8386875d389770939484c054bee652ff866274e9eeb3a807ef9041e9778d07dd5620c03f5439e37500e54ffffe7e05bf35c56e6628","ssdeep":"384:spW8lu6CeP3xyaz//dfmQJ1xAFH2mbvnXw4u:sW8HCeP30arp/J1xA12ovni","tlshash":"73528cf9f30899dcdd2c0b305d6a0a2d19a77c5280dc86eff558f91562beab091b06e1","first_seen":"2026-02-13T02:49:01.494665Z","last_seen":"2026-02-14T04:05:54.76452Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"havocworlds.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"havocworlds.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"havocworlds.xyz/logo.png","fqdn":"havocworlds.xyz","domain":"havocworlds.xyz","tld":"xyz"},"ip":{"addr":"104.21.94.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://havocworlds.xyz/","date":"2026-02-14T04:05:32.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"havocworlds.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 14:32:23 GMT","end":"Wed, 22 Apr 2026 15:30:10 GMT"},"fingerprint":{"sha1":"0C:9A:99:63:69:24:63:E2:1F:51:BA:7D:A0:AC:02:95:DF:87:0C:FE","sha256":"22:46:7A:DD:66:7D:5C:D3:9C:82:0F:D7:08:D0:91:E5:98:2A:9D:97:34:90:AC:B7:45:16:89:0A:99:87:65:49"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: havocworlds.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://havocworlds.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 20 Feb 2026 02:48:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 15:06:34 GMT\r\netag: \"3581-69723cfa-ae194e75a2dfecc2;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 13697\r\ndate: Sat, 14 Feb 2026 04:05:32 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 91023\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1LwaKkDyCCJY5%2F%2FlIJdrLYpGbMiFWKqdpcNJeiG%2BuE0j%2BTx%2BFBCgTZL%2B2n8wtModYlp8cUkMTcbjxZLGEr%2B7LSnrPocnlucB0zqKZhEEdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9cd9b00cfbeb8be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13697,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"4ffd04eb30f6fece7ebe37b8cb362a79","sha1":"1852cbd976605df1e6033b1a596c7c0bac831106","sha256":"18d094c7a558c4936e01dd476917bae3b9c43f21bb3e148aa38bd2d489eef5d7","sha512":"81374fe6c2cac267ff62ac8386875d389770939484c054bee652ff866274e9eeb3a807ef9041e9778d07dd5620c03f5439e37500e54ffffe7e05bf35c56e6628","ssdeep":"384:spW8lu6CeP3xyaz//dfmQJ1xAFH2mbvnXw4u:sW8HCeP30arp/J1xA12ovni","tlshash":"73528cf9f30899dcdd2c0b305d6a0a2d19a77c5280dc86eff558f91562beab091b06e1","first_seen":"2026-02-13T02:49:01.494665Z","last_seen":"2026-02-14T04:05:54.76452Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"havocworlds.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"havocworlds.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"havocworlds.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"havocworlds.xyz","domain":"havocworlds.xyz","tld":"xyz"},"ip":{"addr":"104.21.94.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://havocworlds.xyz/","date":"2026-02-14T04:05:32.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"havocworlds.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 14:32:23 GMT","end":"Wed, 22 Apr 2026 15:30:10 GMT"},"fingerprint":{"sha1":"0C:9A:99:63:69:24:63:E2:1F:51:BA:7D:A0:AC:02:95:DF:87:0C:FE","sha256":"22:46:7A:DD:66:7D:5C:D3:9C:82:0F:D7:08:D0:91:E5:98:2A:9D:97:34:90:AC:B7:45:16:89:0A:99:87:65:49"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: havocworlds.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/60138c04e6b2/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Sat, 14 Feb 2026 04:05:32 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9cd9b00cfbec8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23063,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T15:56:16.616317Z","times_seen":17582408,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"havocworlds.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"havocworlds.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"havocworlds.xyz/image.png","fqdn":"havocworlds.xyz","domain":"havocworlds.xyz","tld":"xyz"},"ip":{"addr":"104.21.94.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://havocworlds.xyz/","date":"2026-02-14T04:05:32.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"havocworlds.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 14:32:23 GMT","end":"Wed, 22 Apr 2026 15:30:10 GMT"},"fingerprint":{"sha1":"0C:9A:99:63:69:24:63:E2:1F:51:BA:7D:A0:AC:02:95:DF:87:0C:FE","sha256":"22:46:7A:DD:66:7D:5C:D3:9C:82:0F:D7:08:D0:91:E5:98:2A:9D:97:34:90:AC:B7:45:16:89:0A:99:87:65:49"}}},"request":{"raw":"GET /image.png HTTP/1.1\r\nHost: havocworlds.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://havocworlds.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 04:05:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 15:06:34 GMT\r\netag: \"23f94-69723cfa-40abc9050af02b;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 147348\r\ndate: Sat, 14 Feb 2026 04:05:32 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hD0Ryvk737Og0tGPSoFZM4%2FWjkrs6fjssFaR7V9pD4PmEnRLGxncrcSH%2BqMAxU4Dg3CKkcNbniqaDL96jaR6Yua4Nhqiw4JQbLgQoKmJ%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9b00bbbc48be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":147348,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x500, components 3","md5":"225ea0b94fbc5ac081cc98662b75b376","sha1":"db13e27a01b6f8fb71b1d4908eccacaa4edf040d","sha256":"bd034ce62fd40f2113259da6fc7d4757f413a9d3db7bd480c42d0007df208aa6","sha512":"0e6071a23c727860820616beb42072465b6cfa8a829cd960621578feac33a2972441748e9b4b355b4801754337b42d9d3f4c98812bb8219917c3c81c15d250a4","ssdeep":"3072:s/2mpI0f5bfFj/9ZykV2Z4Jy1zB159WCwaGiKrC0fd:Pz0fNfFjFZykZkdNwaMDl","tlshash":"8fe312dccb68914de56fc638446008fdd9a6a6fd4e39acacb0c4ac602f44bd4d1bcc55","first_seen":"2026-02-13T02:49:01.488475Z","last_seen":"2026-02-14T04:05:54.768659Z","times_seen":2,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"havocworlds.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"havocworlds.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"havocworlds.xyz/cdn-cgi/challenge-platform/h/g/scripts/jsd/60138c04e6b2/main.js?","fqdn":"havocworlds.xyz","domain":"havocworlds.xyz","tld":"xyz"},"ip":{"addr":"104.21.94.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://havocworlds.xyz/","date":"2026-02-14T04:05:32.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"havocworlds.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 14:32:23 GMT","end":"Wed, 22 Apr 2026 15:30:10 GMT"},"fingerprint":{"sha1":"0C:9A:99:63:69:24:63:E2:1F:51:BA:7D:A0:AC:02:95:DF:87:0C:FE","sha256":"22:46:7A:DD:66:7D:5C:D3:9C:82:0F:D7:08:D0:91:E5:98:2A:9D:97:34:90:AC:B7:45:16:89:0A:99:87:65:49"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/60138c04e6b2/main.js? HTTP/1.1\r\nHost: havocworlds.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Sat, 14 Feb 2026 04:05:32 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9cd9b00d2bf08be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23063,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (23063), with no line terminators","md5":"1aabeacbd616ef90c09e8a40ce3d131b","sha1":"07c9846220c869e44fd5c475e74f03d9c4bdc074","sha256":"5731a143af5a55abcb4ebb41a3254da0ba413c40a68decd57e9e0b047ab9c62f","sha512":"871d259d6ea95f8d7d0a7b0bdd9dc4b5b39623f8c611e44e63c0dd6bc52db724b19893c6259c07c4dba777ddd5bbe62eb4e590fcd034de478d9b8221481d0cdc","ssdeep":"384:4gEp3b19E6EAY30zgt7ImyUIPIYhXNf21uMc3T7RcPjyqY9cPuSF:Cgt8H1vpcPes","tlshash":"26a2b8ad7ceb781742523870036f646b272f6ec021ce683e8e1785d47971348a97ed6d","first_seen":"2026-02-14T03:23:43.549031Z","last_seen":"2026-02-14T04:12:18.001196Z","times_seen":6,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"havocworlds.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"havocworlds.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"havocworlds.xyz/cdn-cgi/challenge-platform/h/g/jsd/oneshot/60138c04e6b2/0.11086927139763875:1771038638:F1lXlNF8upPLSpqNiqJNMi51CQRdsJjpeDzKw6vD4eM/9cd9b00a1a888be6","fqdn":"havocworlds.xyz","domain":"havocworlds.xyz","tld":"xyz"},"ip":{"addr":"104.21.94.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://havocworlds.xyz/","date":"2026-02-14T04:05:32.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"havocworlds.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 14:32:23 GMT","end":"Wed, 22 Apr 2026 15:30:10 GMT"},"fingerprint":{"sha1":"0C:9A:99:63:69:24:63:E2:1F:51:BA:7D:A0:AC:02:95:DF:87:0C:FE","sha256":"22:46:7A:DD:66:7D:5C:D3:9C:82:0F:D7:08:D0:91:E5:98:2A:9D:97:34:90:AC:B7:45:16:89:0A:99:87:65:49"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/60138c04e6b2/0.11086927139763875:1771038638:F1lXlNF8upPLSpqNiqJNMi51CQRdsJjpeDzKw6vD4eM/9cd9b00a1a888be6 HTTP/1.1\r\nHost: havocworlds.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12142\r\nOrigin: https://havocworlds.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://havocworlds.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12142,"data":"$PKt32shTEInQ+i5s6DMPIERiRKi9iftMF+tT-iVtgrTNrkfm6iYt$r2FkiZiLLi-6k7i65TUNiErTWrufzKsggfyKiyJJMV+i9QL8EiFUiKh+g6nwfMipOwx8yFlR+i0DotrKVh5210aPmiivaQK-DkMi7Qz7rbPtQQpsiSeW6Z8SRB-27rU2HtilDQlFcQoEiTa1xJ6FH2MH6ceaNiT9dismiSKqdtIJyh5$KZuYQ1+IVZ1bTxPsmiTl6iim5Poz07nzzisRC0bd$sKMiia1FUITKiTpN$ipKJe2i-P7MeKogEN2misJ6-imfVyJDYnhm8WdisVgT2dCpEiirdDz82DJWs0WTlWiIkJtsG8-Vii21SsZ9Sk1VifdnxO70YKoRNW1NaMhcO2dRHDO9y2Dr2JLI2yYhiiUspttTTf+eQlpiTfe13T00lBW+60vx0TrzUvz9+zct3WdRh+sX11tIT0o6TDKMDUkeuKq9KPklexPQDTtRhaueXP1eURu-paknbkhts2k+Js12wO$LbNKiiC3v5lzkQOOY-Dhvhr2DvCovUi-l6Q86RbkwZ5qRoxF1efG6kq4fUQalpUTeZweRiIOYk+qZD8-NI9CIIKOcQXQ3X1ejdC+bNrdTmf+1xfMFJwDcaivb0fbs48fq0SX3XGyR8NkfRUaIPHOQlLFQ8bjNMnc+vSf+lQ9uPt$iL64nHRjRoekv-DNtfUnJHKJekerr3HyFyDmPBpQ9x+3ThUKpksWaG$m2SY$-x0K2p5F4CnsskM+etiZFEvKl3EsK$sMfExMJTm2s2epcpR-idWNsPxtoUJtFvJSYsq3rGtUJUZKgsKlW231rIdJr4s1$XdlPK5g-U$1H2UMKdOXsKdIEg5gsMJRDyHJRxIXf5VixJMdIT-iTl2EK5Oa8NkOh-ig-2fTz5Kn6Ksy3T6s2IfhqUZMrsGI7Dt0KTGoaykl3NraeWG-i0WW0Ei38Kfet7-+aOb3fd0$d+n1JtSNsyEKgiYJK3dY1fQq2swbVzKMrwS8ti9zf$D9PsLX3f-+$sPM2dIfmSaxLBTkuzswsyUMfm9sswSlWcfgdGd1o82v2atRf5etiWX-ujE5eOXrF8RtO+jUwIkQXIVRLTjr$iTZ$ssqix0e3T2ST8tfsksKjIWdXgl54I2gKpOaWySIR$0n5gIj8LzIVk+6I5erMtnZ7mIMpyiSiWydERP$xs1M+rs+CXuZUs+Nk$65Nk1iIridJyDW2By0dMf37JlzPZ+GZSVIgMKhN2MXvbqSCmTUKy1E3-74WtELvEt-13wYgnP+JO5rIjI1gWtM+VlVdEe2KnDLOpykXXqvDRJXv2WuHcDdOPuTBxVq8riVuYRhvO55Ol-iXlacYNiJL+i+p75aOM2GatPoGfiali6xmrraWi5r133JjKs74PSTP8CVIEMKBhTjt1D-ir15-TGchYpusQO4x3IW$gNsi45dOpZ774d5DeKC-Q9pjUQw3lUQ1e7rDTDRIMdYePZVG1FwKI1Whd48jcvbtYc22UgceJQR4aWeHWBHuR4UicHgGhIVU1iTMs$GyItS1-ihnliiMc5cCjvUNFdsK$zWP$qTIEMtMYtrKsNI+8PZ5yoMiSX4I3fQbr8qCiLtbllQMMNfnisegsVindE8Rs+CVeT-w53+ntCiU-UMDVb$ZLdDzUTM3wfUGk-FauYO+NW2G8ITsX-+Y0NiRj0SSNS$KViXT5KsKrn+vbyssyaCNspLWcIhMek7ZlyXGFYMndXyhDWxMtWlaPwXV1Nvq8K0QgX7Dio9+VJrf5f+ftfshEjgiEKP0V$5$M9SXKkFSgWZ+9eG1wFaKJ8Rm+zinkaSii1uS6s0ok3pJ57Rc+qSZlzCTBS7+TkdfMEnEiV7YBdg2fkgiVRa+RIeL+iSnSlB6u2MMqS705shTsDycl10rkf-SMF8JNk2iJIpvrTDd$UITiEnF-NZnxJPsZfrdDvhmC9x2UdTec+TIFMykDL6p0mIgf9vkw6R6Nvb-H0iVMB6k+RfVgR8vDWc2C1ea1tiReKs+71TkJU0bffa60tOoqEMu3l+dBLf5NdrrFjwu2ViD-KIqdhTkN-$s27WbTJIUtJ3YyaQEMpUT6UydU1zyTKUGt2meKWBakTZWgqaG0h2iepE0s1FJisqUllChReOE5adtWxI+onTbnkJokQgCkf+S9kcUXgZNz+fHGwdEqZZvpU7dJ+M0ra0QLYl3vDOp3+Ktj5h0mZPx1CL3wbew5EgpHajbzi-TyN7b6+eeT$uacMTd+$heindLT9mXRsPOJs3paPrB5LsELthDFdWDXtblOlX$oJ5INzMvJwM2lDB3$5ZvvUDWFTefgCq4JNsLd1uT--nPfXD9UCqyk1dKWiqEN6dJ0bn1mt-1FyUetwWNvniUxUleZe4UDoZWE70CTWI$NWqIMiQ5JONOiTKc63sRjhlyx1pYDtU1ffry6yaiTfqB3Imv-q7SL-iDQr20FdWZJqMCB9pN$iWB599VFrMfzeWLy8WlQbiv06kwMinJtkze9Psuc6EiRrY6mwMMmQiSprqU-n-+qJyl8fMTuxlG2riztGxSU-oWcTi2ibuhVL-L1S1YJpmXa9C$K9ine+iV0WbnRYKsa-5WP68ifeSbU4eaodsMtJsOg$1IT2m5j5dMfFmW7RHr2UPhZaPxUH-V2Y-iwLrJCELeSsPsFdUmz36Gi7IuiVwhpoFkTk+hKqjideNSK6gp609u5kjmXlecpi2-xkh5Eyo8hI5nV0WlJ5t-fLzDXPiM4htdboZNM1GL1xsJZFCcsrEeNWosFO-lUjvUMVmX++K-5WdaSn-$5C6D1zEtMYd1dtW+uL6YM8dEtoem3QsDlHFLaGzj2CeV1Ka3sYEFVPkjs+6Xsk0i1Z5tKvqVnf$RXWFUqR7PfXrEx1hyBD6WeqEKdtNU3vitkg7+5wxdLNI1SSHzVy7O8sPv26FgdkqCZ4vUHzEef0KWPnKBUbWOi1vWDGWrJv5siz1SM6tmsBpxZhOhwUNqvIuJTleQzhZjgSSex1u89g6$ef4oI1+0RwTIgGN64EP0ZgDn64MTOYWGNFmurXxDmi2UI$Cdr6Os-uaLKLcUs1nKgC0QbkSOBB3ixI$-vlCaXh$j1zmEKiSud1YEBGYUR6YCzk1ZSc7HUDtna1Ddey0$r2uJ0JsDelIS0RgL$qVRGlysXSxh4MXTBaojEdgRI+6GCpV$kYEELF+Y$lr66FczTmL0HU-psg$jwDtLht-l5DfyPLqWzQmEfEVL-IIUI561L$uEo2Uczl$CYTULgNpVBxp5uk3vEfMigRFwE59se9Cm5FS3H7+2MzspFjJlUH57G+S2pWhTZaCa-WyaZ0dN4ZWhVqgQhsaGQvO68DtfEK9rSCr++EgDvnEEBnirDVVOn2SFNFlKt+UlxUmHRqC0Z712lH$mhK09CpnUdtb7j0DE1Jdi3MRm1nwp5NC0at3M3pCiyndecJBrdqTU7H8-gJKmf0UP1UE9G1TE7tfiMKPU+12p2-6qc+dqXh35B59-N-fs60IqxKP-5sGkK9gq5RFJLJn1M55R6ho2x+pnSqM75-x+j5OHY1zRs2rT1s+HhK3t3ioZrvvmCJeKRene3TLivJr23NzkBN05Vidnk+QtMKkmuEfmZeTJTt4ijE+1osrpnUN-qsiWRnMsBmbs6i7s7U02K9kHNWC+pl15N1YqHW8R6pUmeqFElKomE2PkEZn0t1fnRmHrFvxMFDRmEKtlxiJ1GUwHdEbHqZrpuvNkS0TZnejpV2CE2KRNh7KmL01HyNoWf9rmlstJfW6s07ViTWhKTUs0hrRVTmrmYV89TX6eyMp+dExisiDX-l0V-Us-BroWuWjvcWKiCTnD221-MewKwVKNwWukUPB5b-n1uTxej5e9MXQ7ZNOnznuiCHxmkvoHmlBJ0Rz2MJ15RHFUnHE91KziEqdEUqDmn0TDYJbXrpc+ltIZ9sqqYivq8mzMlpINvXC+sqkSU-+vFhcTdtIHqk7heN+q1KYn59GU05Xtn0tJ0sPHq1+mjSQl8TkK8qGUEps+rDcXjHsttSR9n9oWt15159KmnHCES5yiTtNE89KmZeoMY1FESXZeIlnKSXs0ame7tal9W0-71tDsuMPsRnQZL1+aDaVifi678X4Z1KSVMt1DtJjTQq+tjToTxE3qkaG1sVvtiKKntqfU5Dvhxiyij5C0ITtJ4JZPNkVsurSvPU1-UHxi9HzMK9Me1SgSn01Dt+tsnK+muTNPZ1siMZXt+R5tCTF529+6h9jn6lXmdiBUtKghFEfms0jTy5diNUCXKRzadS19M6PX4le6Ta1-g+xiYim6w9uJDWtappdhS-iK11W9B5S9+KkmCE+Ei6rimhetb7j6vpIWMlEH6SPkkFzkRmlexiJmzJc+vTnKp9k6plE+dZGH1kx6TveS2Ss+o5N111IFkJc-ZWeUTVUlYqHZxme6jmw-t2zlg5K9eJrtj6Ma+f-snKDXrsTKBqstqSfTiKsiuHEvf+lsGsm-tfpV9mKs+fwKBi-P3M3VtfOHzH$f11cVC6MSwhL6PZ-7b6RZ2FFDXEst6pMeWRLtyMFDqU8TaW$VLnbR1RpF1fbmEfNXZlpUb7Oe3ZHXc+7LbiQiWtsaelOSh7KZPROEPSrWZnzRPH81Pk4VeL75dhPWc1kWHndhEFWJKi1DwigEBL+s9e3izH7L+Z60nXYi7FUS60XHCN-E1lfHYhT7ILls4Ve6U27KphtUSXfq41p6klLselT6GU5-2K$kgiOk9mL12Zg+y5l5atdmzUsJCeyHi+RWQ6nZ8kXLORtJhq8vjZT7LpBdCUd2uk4H4LHlH+b-mihmET-LhKiHESl2atWXgW1KF7N1EvfWU0GUcLpvbarvHrXK4txiI-etesvvRnK9+wov1Dl5vhZ-n1+Xn0s+LivfKZ0F+vmnP+M7OeYnE6KNvq+SSNNiZdE9qpSSY7Q5s+10l1sixVUvK9q+Y+ziofl13dHJD1zq7+QfPSC+$HvaRdelELlXtfs0j6+--doScfC+JMk+lSILdhKHynUdI$0Rttcqj$pnmlSvSJ4Vu$JRvRKdjFawMKpnDXDPsHWtn$Mek58U7dZ0OqEaK1gV60TDX+JezfMTDh60S$rL3Sukzds-JEzl4vD1P$i1Z+ukMt71z93vzNViSH-EuLoNvw1VzboWZ6sbFT45DlcmPF+adwdhMe9JpnjfSfMekdUXfNRmW9TtstJFd$5XPHts1Ubirtk575jws+LMqwgwFDXUOpFDfSLhM7WaMfGUs+-VOfbVJECiEXelSFZlGUD55-D-Vi5WF6mHr6PXdt1XyNOeyhj5RwuTOMunfF2wFUyeZJzSPV4VK9c0xh4UmVs+pv+-LpfWJ$ENZ$n9mSTfqqOqk+ndYi3-X5NNk61nmfSaCpP2574f2dbW-EedDvohnecHHtneybB06dyMWE+VFT0Rlafmdmv7tN-65mTdw+OR-NWkM94b7+jDoDxSTSDJeK7s$ikv$h3Rstb7nVeUiHJVWWCatsuESbx5VVBafvJSSf+aBq7Kyav9EvOGwN1UOqGmHJmwr6tJYYeE05ghi$awbIxMTD2Y6fRm1SetLT+1gL1DphUl45m1GhLpQ57lq1BHM76XLpIVChgmQVZSFE8bRWatqJ1Osn$i0W3dOqhFYin$4JE9teqnvS917ZtfvmESDSM7x+x+Q50UpnfmOYmEqTkEvtty2NYN+f1KLSRKGUZeowTtMJ3RC0SX5-XKE0RrqOXGKiDYOMxmhOMtvhCEclbW7+S5E-V9oWyOy5eK+e$bKSo2M7j6jX4+5FPIN$UbFTs0sYb$D6G$V$y$3$0l6YV+WtXtTULLxZr6DOnTwsfdrwx93H8vIp-mjvovm6tLw65L1ZvhP7K92ZlZV2aqZe5$IpSXH6$FE9PzVtStWLmaxZZ1yi7SOfs0wKswtf61l7diFRP5jW1GJEpnfWET4lfWHYhOW6s+4-sNJpo6ZVCEfmoYLpeW8MsWYtahz6GsLiystKqvHTltPni7+dU1cUCOM6oaXYLUNPuM3z$Uxt5ZtftWBKFGi1uiVWtb4l3Yn0cHbfSf3GaJ9-ZnQq15vOtD0XrL5quEUXJqsIROwzetbzkzPFq$5tkYdt4L7fo$V$Kbcq7f8LLpuYQYFEe3K9cVHJOf2ZRr+3YqatTIfiJGThVaYaaazf$dx3GY1-Q3OfOedI6bidJp0h1h3yJpP2Img1WtK9OeaY$-DH9C6lNCrbV-vLdYiZILLex+K9vehlTlDtDzJdyM-1lpb6Gy9muEgqXeksHaC$smPV0RC5j5CsDOf+gMyaUNXavYn06yC+KdLNjLcYM66VXYEOfYB$aaYFC+S-E9eax-ypCVKzzv0v9z$6mz5twKTNsly6M6EL5Is$YBusImYXBbgeVqD7FEjGWedRDtaOdtxb2sF$DtP+qNGU0a$i3m4LvN1KBvdZg13i-NgM$IoMz5xd9-iKab9G2K-ONBj5olPYGSaYG3Jbfy3iztQ6$BGlt5k+ukTKr$cvctlbrBHJBWRyzLGHHtYz9INIjnHIb75UBJxq26RNLt25dti$fmjIHJHYyINjWeizlUx$lRcqPbh8FYfhrFzbMeu$5t26dZNkiJ2v224kmXD9iGtbQLYizlaB0W1DTN4kNSVeYlwG0CGz+fa6KW4L6HOvmB2jTUBvFtfmeJViP23hT5XO4sIJaaIaiSV-BJDOplmoPhcF26BrZ-8+1qdaTKSXz3GOzTsjwj98U7Sd60RzuX3n$buOzyqdWLKerepypO7l6sE86OFU0YbaEbZZUlTUc$7B4fdfj9LT+KDHTtmGuy7+OJoeeEZ+wF$9E9sL2Ur3nzDwjDqyd+Lt3xbSFTNaORVF3HlfD9DPcC7fWZXZrCNGy8vf7a$FgJZwRlnlbvNBDzwKE6JtNHaoPdl1RmRztJiCBNYjEvXEX5uE13df-Yg520XYtY+ekd9U0Ltftd0o+3Q9tpcvsyesQ5Hh7+clVkrLEOML6pj6atiOdnlZ4k-R6CKVZPGdne6s+3OfdbP++OD1QOSUrt+m$jeBHVZ+bjGGhJynZecCt9Oleffy$WtCU2C56jmgY0K6UWd0XYBUMt$Ip$1ed3qKC8g8ohSgFoFgYurTV-wCj5yTYYvtrL2KykUkMQLm9YMu7+IwvtHWoU8aDf$OmHDPaY0uVZ6F4U0J1yHv9WnKTUWmxM7-qRkCiD-Rt0TKtG7m8fBrrDzowdH3Fwp+K946En0a2teaBZ7Nb7TD4tvtYE4kmGz8XBUou99o51wdT2soWl9p3QdioW+pu1TO0ON1JO+KVj0dj5gq5Ffjt2ppdFz64Vj6zCfm3cdGsUnKa18yRyqpkyKBDlByM7il+lJp9f+gL1$sn94VS$3cgcYQKip$t5eCxo8Hgox0ffrpEx6WTDoWM4rvcavsJXs+g0cgy30GI$S$e64-TQ1JhuL0bo-zvtyVDWadn00b8k$snaP+lcg5svLVI8mzIcRMl2SIJ0yJ5itwVtoMttc+ymDV9T2LrC2H2TiQf8tMVnIig+SyajIXjNEM0jasMQykn+-XyisB13fwRMyUsCexT0-bMuTPXrmUelZt0V0U0r$3t3dYLk0LYadGSHKmxrJ7iDI5LJDN5md8V2e+GXX7auxrsLIwpcVyiN5iUKN96Bh$-7NixrJEI4VtsC2dt0a8KS9s2igD9bf-fsok8qYDrCdZKnDg2W0Tht5lx0I-11IBLOnNtkmMD2nI2SYKYkgiJ+5LeeTYtfnTPITq+JoY++-1gaEKipW11Ii1$hkJMEyyWTfik+e-O2IpiXTVmKNmKvtUTOVIS5n+kxswfWOktBr1mmzJTTJ-jbkWW+7MNSTr-M1sRSf1Dd1gpWnDJ7I+ROJGfvIwT5+O+bi6-k58NXns1-1MJyTgKbTYtvtvD-if-fLTVnC+LpgQRosLTbR1XmMedLU-ukatDtmvCg0IsLI1-tMYsDXyq-2iYZMvSRLDV9-$TyWukEPmxW0MFTRWC0mKYkJIiqV4Ja+UkN0sr2OF8MZ53P1jsHsQTYtOMr+fIlazkWZkZ1KeZG-TMjsTr9lJM+r1TM0Il+hKFCUGiEJ$1emzkfMxSOVMYTITkN8M+t+VMc+HtRusGI$2S85ORV8Ry8I7E0OTnRq8kJJZ0f-sEKCNS+nMg3MJMV+5JThmJJTi6fDDakiDorSR2YOLait-$dk6RMc5EXSVnNiBSZ8ffn6ztSUS8NTgM87hUm3lMMYzfiMjIqENmmlSyi9tXbS5eKCJ-q09V1Oe7NijUEq+T5WThtdD7zN0-s8PGOWMth$N0i18+XgVLt7MrUL$-bszV+rBJK7SIfWOoVu03BohL088keil5$o3KKq89VaTrifE0-JU8a2BKNZBEYMwJ-F2mraYin+QwssPaY5gR0h$5TCM52atGtb+t+iWTeiHKL+bDB2Ubl8TNWB+FKyxz5IfY5XdOyfk-ilOtGhED5PMdRVBfBaVVFt0LEmVwe2nvXxiZnYZEWTH2ZRn6I2E9Ku-ytaty18h09gSiBWBTtlgeK13GOLFTXZ5$ZJHxWTOIGUPygiIUghOn+vWmpgl$iRJfMr-RDDF+f+frTg+F-OkcweTiiLi0Ni1$gJN7-70ytRP2B0rm9Wtk4TwilIK$nPMu-82ak-MeNJTIeWFdEPqXILJU-ss4tXimictJr-B-DGLZVkZyUM$Es6PRnlETm$kWtXEV+tdtd8gFLrko+krze80SNqMs7yhiNkiKJSSis8fheW2Ea$SEwPG5ZmSQv9KEtVTnflUOf$LseuSB02FiCg$uJrfmiHk7iW4K7Cy8zpwsL9NzZnkX$0llPWn5gE5-4UHTes61bET9Q2w7Ip6IEiEfzg6MGMPfJsesMMiVxKyE0M0YtGJK0lMidivSatiifSGs9+jiW5S39Q0-aHiwDUbsKtYe5ff-rtgWTbREeR5jkshZ+yk8n+9ScsNPEo8FEZ0pICk7KfiBDSOSQbFXI17Kb2Rr3lPZMdtQrgN5BBPbYt6+ZaDTskTpI$KqHf+g2d785WaHfCr5ynTzlniHabMp9aZ8ToYOWW2vxIk--NDVYcNo+ptJmxYMZdl+zEhKJJ3WTdX1X+rdemHu48UidaFKMLJJgh5mVVVy58UUbMgjkWprsiBUJJ$CMyKuame6ok5Omk9d-qo+5MgTsZDwOFRUQ1MgFswMd0xaV-11mTMWsbOS5OkKXMWuxM52Ui4kgaKyEJ-jOdinPLp1FTyP1zl+XEaM8y$yIVt$K$S1joE-TWrhgiFt3DJOkOl1OcsNsTtJ9$tPyX++4idvTKTdfsWVtTDlrZ18Yf9ipUdD-ti7smsLK51xRDpZDfyI$dVKdreNg6TmTIy9tTSK9xf9F2J1QnOfh9r$EbkPYlrLigUra8EO2TwUNimlJ6ioO9+IKVkd90b-qTyy+UKiy91NghIEiPeCnNUs8ZdSVlqiGtW+Er87sQnyZGkrPSU2OL8rCrvhOPVjK7ytDNkjMeZY1fQWalDrphQjf8KQaFzdiOiKZYoKHtIax6CrRJ$qSIU$zqF4$-N+Z20OgfNFp+ZZ$jKjk-iGZt6YNv93RtwlmKvqTNrFK2yN+7qauTS-42xkZV4kQgd9mrMOLFzzisnZ5JjKU5Jies4LmlKc3X+eI9FW7XpJjgwDulyNE9ImxogwDzriED6T98c31TOzPtGkYDIHqgUNzcFrtsMKBZrTi3nDY-0eI4Zwp82if9Q6qZu3iqIzrfgFvHxoSr2D1inGkm+S8fYoliclNT9ZxoKyUxF9Fxkm$$BLYUTI6FkTFtEx94UR3tr$TGrs$IzoE3$he7RooboJWh5OnTtdP-YO$UFGVi0Id91iQ5Sad9FfMoGJ5DX313VffnKiW5bxXZXVfdZZnvj$WU2s8DUW-WhsRDz5tFfvTRdgHdMqPTQFa2pRvzMExbzYK+7EGftCd8eXDFIExsrPenI4l2fB2O9Tuih1xiCkhhdXxPNyoRJNr+0as6PeTxiJWFD0kz3uSD1awFkx2pXZo2cLHVML+0FS0l3zUOiS61D5r$ret1YshL1nOrhP8BOHlPXxM$uStaj2d3Gie7LtIYtklJfsfO0FhDhtbWOzk9YpvsnPC4FFzeZWlvsQ1DRxfdqr8nMHmaWpxkXzfvTQiWzyedbzjK+n4iNp2vx9V4WCzJIEnQUdC39LnlGN0neY2I3lTl7wmdr8JdFlliS+J5fFs7WFzJPXlIb3x8DqgJd1rJqHxoZsMMiTLVZqm$ruTT43he-b-WhTbTtx30nGkJtIM8WobzjKnJCsvf-BM3GMdLRt-Y+$KxdiGZF5HlfEMIzkXahoZIW+FSDdtaTdxcgfqp3zkcJyNCnRmgftyj9+KEqRZL14XIWa5jKQ+xJi339U-VNfg5uf+F085QVCfDK1Z17Qmo2VQtuMhPqJajtuJOMH8IlsTSL14INKQMsMs4zVsOTqf35WlS3KXe2eYtgntwrEiWd2zOdMhCXhbJ$qH3rL2Ihwm08yML$NaH9Kw+zEmBpDxVFiDEgPf5liDJXx2a8t-a9IfJEvKv9q63gLopi+wGk0tZj3wdmlodv7Q96ZIO1RsiFqhF$q7eUsBzeFmepZ+oZyqfCL00h9tSP-3xYMsdxM3$qUaCdHVewoJedhjTyzfe0FXv7NdqDjxveO6Yh9bxeaBkcRswipM6xqn8dV3kwtpNS6ZD8yW3Wwp+iFxJDokb5LwR77U3vnni3lZMEKnFylCL1ka8FmeQ$y9aSWgF6MZpbtK2t7dpezFfTNbdcSxqqCgLmeFH08M-PQCjFetdHrmCLxpwfwLensYmCLdtJSwYvnsYZCiu+JiLk-o7QiNiw53sX7-LsrHNq1r3kw9T9d6vC51UDGdVvNbh+Dkdlelf578WoqeDdYel$7OMGYwfkSwe9flvbWvZCwqhJUNgTohQ5QuJII3dr2QYYXQlI2JWwheeVBbyD9lJJ$z-WVdu5ruJJywQqSVUu3Lqv3bfKPNdxDa25Be9KPU+OxXNb84CIZL2bZmSn1uXaSJwvUS1PNexDvQf+-CIdPb+qPvQfET4IdPCt99v5L2-bz06LiRZvtLM-Qd+kQEwqsELlPOGcFMTumamVKqHI11b$qLJ$wZ093m1MYdwe9LE7lz0Lnq1xC1bFEy6Bb3Lx6BqrmUe61EQxxavGdSlP6+anb1dBlrMlF$ydnJ9YJywVlQ6qL2rwleqbsqO60RNjMjJJielCCVRerO$BYLIqnFhUN0RQT9JdtI7YeQks7VSW$PHByakFfPaHfdZxzK5sKqtW3ix0yBBzkMRji$5y5Zkm0-B1UMKierTDi7-JxVC4JYPuBfE-5ejioD4i+4CmlwM7CWaHhcibfMH90I3dZjfprLaOx4v6V8+ZqrETVf0BPScB3L0lbysmsFk5t0iii8a1YOMrIWKsrOhXK+5t8r$+tpigs36jjJRTJI4sKKwKq2sPSDo12aWfRFtcBi7i6upKsKer-0WUDiiMl5+hZq8XiKK8tN5glsK8oSqW+N3WsegVI--COk+y5vKqaieoqKG51N9nc3b5satYt2iyo+iiDttGPiiS0TjaYxiYDNwdyT9sUipMKucr3iikDXYo+TxvODwwvjbYfNethKMFwPWZY0iyx+i-FZYfNWsgjNqssjZY-n-ist-+TvjGYoZQGJOTDTDpX+2iSiEoNy9hjaM15ilEnfVu+sKGUNDuyH0KTIXKkerZgv5IKUpixb4tiz3bdyIpiiib$0s0f0pUiWtifxNICuEs-Gc+BiS6sBu4J3DdDm$x+irTbj9iMM8rK+1oIjypsUtH1fvfV0uPgma2Tcx6IcMs+41er61$-8CwRVEKphNDNCi$-LTaph+hpV8KxKmKpDYhdEE9DXRSSB+yvCuaOlbTrjIKZZDt8ODSRJi2YMHppQn8EsqtCteHojV52bsT+hGliVg1S83Thp1ikiVi-UMtsqpSGIEoI8dMh21O15rJVoq$gg-12SGPS17D0$KkXsB+y58eir-rID-ZGNiKly588l9WpICe7eT+Y5T9WXWlejvJO3r-atiiXIgN5KyjObFmYbJ4Q9PDjRYBHj8BOnHOcpZteZ9REOIMImSCtiixz1$ii"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: HUQ+ObccV7LQUJgs0Yr/gg==$TE1VZ0tUyY3YtkTd78Twew==\r\nset-cookie: cf_clearance=iY1XjdCg7cNIpGfooLia6bR6cP2nQB54x2uNxvzuzzw-1771041932-1.2.1.1-bQewASodNmAumvyij2zEp9AVL6jtGmONZXG_yFuiG4bq4BHYILOZuzArkxUTBUGqCKqDyETAYsYd13DoXiiXSeWk5NpaU6fyRxAcPvc5JTueUKBdj3dvgZQCVebXlFRqwEAZkL8gM7EnivVHAUc29knAmHdbDXZrZLWx3xqggXY9BRksf.nV6ICs6gJGEORgGgSkpVRstL0W0Wj2hOapWNV3kbAtSy5NdgHDN1wFVGA; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=havocworlds.xyz; Expires=Sun, 14 Feb 2027 04:05:32 GMT\r\ntiming-allow-origin: https://havocworlds.xyz\r\ndate: Sat, 14 Feb 2026 04:05:32 GMT\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9cd9b00e0c088be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T15:56:16.616317Z","times_seen":17582408,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"havocworlds.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"havocworlds.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}